New controller-processor guidelines: Beware of impact on data processing agreements

Assistance with security requirements, data breaches and DPIAs: According to Art. 28(3) GDPR, a data processing agreement must stipulate that the …