Cloud and Contracts reminder from the DPC
The Irish Data Protection Commission has provided a helpful short guidance note about cloud services. …’A data controller must remain in control of the personal data it collects when it subcontracts the processing to a cloud provider’ Article 28(3) GDPR requires that processing by a processor is governed by a contract…