Data Processing Agreement Europe
That duration of the contract should include the staff of the processor as well as all temporary agency workers and third-party workers who have access to the personal data. Where a processor is entrusted with transformation activities, the controller should only use processors that offer sufficient guarantees, including expertise, reliability and resources, to take technical and organisational measures in accordance with the requirements of this Regulation, including the security of processing. For more details, you can read the ProtonMail data processing agreement or read the generic model data processing agreement that we have made available on this website. 3.2 The duties of the sub-processor.