{"id":187969,"date":"2024-05-15T18:33:33","date_gmt":"2024-05-15T17:33:33","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=187969"},"modified":"2024-05-15T18:33:36","modified_gmt":"2024-05-15T17:33:36","slug":"sub-processor-due-diligence-data-protection-law","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/sub-processor-due-diligence-data-protection-law\/","title":{"rendered":"Why Is Sub-Processor Due Diligence Important Under Data Protection Law?"},"content":{"rendered":"\n

In our data-heavy world, companies often engage third parties to process personal data on their behalf. Often, a data processor will engage third-party ‘sub-processors’ to process specific personal data on behalf of a data controller (usually their customer). Several legal rules will apply under the stringent UK GDPR data protection law regime in this case. Due diligence is vital for a data processor to comply with data protection law, as it helps ensure that a sub-processor will fully safeguard a controller’s data. This article will explore sub-processor due diligence and why it is essential under data protection law. <\/p>\n\n\n\n

What Does Sub-Processing Mean?<\/h2>\n\n\n\n

UK GDPR compliance<\/a> requires a thorough understanding of the dynamic between data controllers and processors. <\/p>\n\n\n\n

Data controllers decide how and why personal data is processed. Processors, acting on their behalf, carry out the specific instructions of the controllers. <\/p>\n\n\n\n

Processors may also involve additional ‘sub-processors’ for specific reasons, creating a data processing chain. <\/p>\n\n\n\n

Examples of data sub-processors<\/a> include cloud service providers, such as Microsoft Azure or Amazon Web Services. Their services can be crucial for businesses. <\/p>\n\n\n\n

What Is Sub-Processor Due Diligence?<\/h2>\n\n\n\n

Under data protection law rules, data processors have a huge responsibility to ensure the security and safety of personal data when involving sub-processors. This requires careful due diligence on any third-party sub-processors brought into the data processing chain. <\/p>\n\n\n

\n \"Front\n
\n
GDPR Essentials Factsheet<\/div>\n
\n

This factsheet sets out how your business can become GDPR compliant.<\/p>\n <\/div>\n \n\nDownload Now<\/a> <\/section>\n <\/div>\n\n\n\n\n

Selecting a sub-processor carries significant risks. To protect themselves from liability, processors must evaluate potential sub-processors to ensure compliance with UK GDPR and enter into a robust sub-processing agreement<\/a>. <\/p>\n\n\n\n

Due diligence involves investigating factors such as their strategies for preventing unauthorised data processing and loss, their technical security protocols, procedures for data destruction, internal controls for managing data security risks, and employee training. <\/p>\n\n\n\n\n\n Continue reading this article below the form\n <\/i>\n<\/a>\n

\n
\n Need legal advice?\n
\n \n Call 0808 196 8584<\/a> for urgent assistance.\n
\n Otherwise, complete this form, and we will contact you within one business day.\n <\/span>\n <\/div>\n\n \n\n
\n