After the DPA - how to follow up with data processors

After the DPA - how to follow up with data processors

Would you like to watch the replay?

Become a member of the Openli Community to enjoy replays from all events, networking, and exclusive access to summits.

Join the Community

The DPA is in place – how do I follow up with my data processors?

All data processor agreements (DPAs) have an audit clause regulating the data controller’s right to receive information about the data processor’s level of compliance with the DPA and data protection laws.

In this masterclass, our community contributor Niels-Peter Kjølbye will take you through the many different aspects of these audit clauses, including:

  • Who is responsible for performing an audit?
  • How often should it be done?
  • When is the answer from the processor good enough?
  • How can I use the audit clause in the DPA to manage expectations on both sides?
  • I have several data processors for the same overall activity – how do I approach that?
  • What is required for sub-proccesors?

There are numerous ways to approach an audit. Based on his experience as external DPO and legal adviser for both data controllers and data processors, Niels-Peter will guide you through the legal and practical aspects and share his own experiences in the field.

About the Speaker

Niels-Peter Kjølbye

See profile and other contributions

Niels-Peter has been working with GDPR for private companies and public authorities since 2015 with an overall aim to allow the complex and still rather newly developed data protection rules to be adopted by the clients as smoothly as possible.

In the course of his work, he has had the privilege to learn about many different types of data driven activities, including insurance, web sale, university, software services, consultants and shipping. It has given him a broad knowledge of the interaction between sector specific regulation and GDPR. Niels-Peter has been appointed as an external DPO for a few private companies.

About the Speaker

Stine Mangor Tornmark

See profile and other contributions

Stine is the co-founder and CEO at Openli, a tech B2B SaaS company focusing on helping companies get better control of GDPR. At Openli, she combines her legal and privacy knowledge with a passion for building software, helping companies make privacy transparent and thereby give people their privacy rights.

She has 10+ years of experience as a lawyer from Plesner law firm and Trustpilot. At Trustpilot, she built up Trustpilot’s Legal and Compliance teams and processes from when the company had one office with 70 employees to 850 employees across the globe.