After the DPA - how to follow up with data processors

The DPA is in place – how do I follow up with my data processors?

All data processor agreements (DPAs) have an audit clause regulating the data controller’s right to receive information about the data processor’s level of compliance with the DPA and data protection laws.

In this masterclass, our community contributor Niels-Peter Kjølbye will take you through the many different aspects of these audit clauses, including:

• Who is responsible for performing an audit?
• How often should it be done?
• When is the answer from the processor good enough?
• How can I use the audit clause in the DPA to manage expectations on both sides?
• I have several data processors for the same overall activity – how do I approach that?
• What is required for sub-proccesors?

There are numerous ways to approach an audit. Based on his experience as external DPO and legal adviser for both data controllers and data processors, Niels-Peter will guide you through the legal and practical aspects and share his own experiences in the field.

‍