Cloud and Contracts reminder from the DPC


The Irish Data Protection Commission has provided a helpful short guidance note about cloud services. …’A data controller must remain in control of the personal data it collects when it subcontracts the processing to a cloud provider’ Article 28(3) GDPR requires that processing by a processor is governed by a contract…

https://www.dataprotection.ie/en/guidance-landing/guidance-organisations-engaging-cloud-service-providers