| Name of regulation | ||
|---|---|---|
| Designation of the identical scope of the responsibilities for the other processor | ||
| Citation | ||
| Where a processor engages another processor for carrying out specific processing activities on behalf of the controller, the same data protection obligations as set out in the contract or other legal act between the controller and the processor as referred to in paragraph 3 shall be imposed on that other processor by way of a contract or other legal act under Union or Member State law, in particular providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that the processing will meet the requirements of this Regulation. Where that other processor fails to fulfil its data protection obligations, the initial processor shall remain fully liable to the controller for the performance of that other processor's obligations. | ||
| Legislative localisation | Chapter IV, Section 1, Article 28, Paragraph 4 | |
| Regulation's subject matter | Processor (Article 28, Section 1, Chapter IV) | |
| Regulation category |
Obligation
|
|
| Regulation subcategory |
Principle or rule
|
|
| Actors concerned | ||
| Right | Data subject |
|
| Obligation | Processor |
|
| Related actors | Controller |
|
| Knowww link | https://knowww.eu/nodes/5a0595ea4b5b5f00019038af | |