Under the European general data protection regulation (GDPR), both controllers and processors of personal data must maintain a record of their processing activities unless they are exempted (article 30 of the GDPR). However, the information to be provided in such
Data Processor’s Responsibilities Under the GDPR
With the new Data Protection Regulation applicable from May 2018 (GDPR), data processors (i.e. companies, public authorities processing personal data on behalf of a third party) will have new responsibilities. So far, data processors had only a contractual liability vis-à-vis