EUGDPRController ProcessorEASYFree question
A processor must assist the controller in:
- A.Hiring new employees, and it exempts any processing carried out under a contract signed before the Regulation took effect
- B.Responding to data subject requests and ensuring compliance with data security, breach notification, and DPIA obligations
- C.Marketing activities
- D.Developing new products, citing Article 28(3)(c), which lets the processor determine its own security measures independent of the controller's instructions
Why B is correct
Article 28(3)(e) and (f) require the processor to assist the controller in fulfilling obligations regarding data subject requests, security, breach notification, DPIAs, and prior consultation.
Know someone studying for GDPR? Send them this one.