Engage a processor

Steps

A processor engaged without a written agreement is a high severity gap, so the entity and the agreement are recorded together.

1. 01Record the entityOpen Entities and create the processor, or the subprocessor of an existing processor. Give the legal name, the country of establishment and the contact details.
2. 02Record the agreementCreate the Data Processing Agreement in Documents, with its version, its effective date, whether subprocessors are permitted and the audit rights retained.
3. 03Link both to the activityFrom the processing activity, link the processor and the agreement. Prudence checks that the agreement covers the engagement.
4. 04Check the transfersWhere the processor is outside the Union, record the transfer and the safeguard relied upon under Chapter V.

The documents register

Agreements, policies, notices and assessments all live here, each with a version, an approver and an approval date.

Transfers outside the Union

A transfer record names the destination, the safeguard under Article 46, and the transfer impact assessment where one is relied upon.