We need data processing agreements in place - Kent

Whenever a supplier touches personal data, written processing terms are mandatory. International transfers need an additional lawful mechanism.

• Mapping controller, processor and joint controller roles
• Article 28 clauses and sub-processor controls
• International data transfer agreements and risk assessments

Who is the controller?

Whoever determines the purposes and means of processing - this is a factual question, not just what the contract says.

What covers transfers outside the UK?

The UK addendum to the EU standard contractual clauses or the International Data Transfer Agreement, plus a transfer risk assessment.

• Data processing agreements in London2,061 firms
• Data processing agreements in Manchester325 firms
• Data processing agreements in Birmingham251 firms
• Data processing agreements in Leeds178 firms
• Data processing agreements in Liverpool127 firms
• Data processing agreements in Bristol126 firms
• Data processing agreements in Nottingham87 firms
• Data processing agreements in Newcastle Upon Tyne81 firms