QuestionQ32

VerifiedPrivacy Risk Management and Compliance

In a contract for cloud services, whom should a cloud provider agree to notify if a personal data breach occurs?

Explanation

A cloud provider processing personal data for a client acts as a processor and must notify the client, as controller, without undue delay after becoming aware of a personal data breach. The controller is responsible for notifying the relevant supervisory authority and, when required, affected data subjects.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!