We need data processing agreements in place - Orpington

Whenever a supplier touches personal data, written processing terms are mandatory. International transfers need an additional lawful mechanism.

• Mapping controller, processor and joint controller roles
• Article 28 clauses and sub-processor controls
• International data transfer agreements and risk assessments

Who is the controller?

Whoever determines the purposes and means of processing - this is a factual question, not just what the contract says.

What covers transfers outside the UK?

The UK addendum to the EU standard contractual clauses or the International Data Transfer Agreement, plus a transfer risk assessment.

• Data processing agreements in Tunbridge Wells30 firms
• Data processing agreements in Bromley27 firms
• Data processing agreements in Maidstone23 firms
• Data processing agreements in Ashford16 firms
• Data processing agreements in Dartford16 firms
• Data processing agreements in Canterbury15 firms
• Data processing agreements in Sevenoaks14 firms
• Data processing agreements in Gravesend11 firms