Security
Due diligence, data processing agreements and international transfers, with checklists and templates.
About
A practical UK guide to the suppliers that handle personal data for you. It explains controllers, processors and joint controllers, how to work out the role of each supplier, and how to carry out proportionate due diligence before you sign.
It walks through the Article 28 contract terms, red flags to look for in a data processing agreement, how sub-processors work, how to handle transfers outside the UK including the IDTA, the UK Addendum and the data protection test, and how to manage suppliers over time and end the relationship properly. A short chapter covers your own duties when you are the supplier. Includes a supplier register, due diligence questionnaire, contract clause checklist, instruction record and exit checklist.
General educational guidance written by Data Menu. It is not legal advice.
Contents
Audience
Delivery. After payment you can download the PDF straight away, and we email you a personal link to the same page. Each purchase is a single download, so please save the file somewhere safe when it arrives. If a download is interrupted, you can retry from that page for a few minutes. Our guides are practical, educational material. They are not legal advice. If you need advice on your own situation, speak to a qualified adviser.