GDPR Vendor Assessment questionnaire
The ‘GDPR Vendor Assessment questionnaire’ is a list of questions that data controllers can present to cloud suppliers (data processors). The questions will help companies ensure that their cloud suppliers will be compliant themselves, and will also process customer data in a compliant way.
29 / 08 / 17
Why this list?
The data controller always remains accountable for the data (e.g. employee data, customer files, patient records, etc.) should an event occur – even if they have delegated data handling, etc. to a supplier.
In the regulation, Recital 81 and article 24(1) specify that the controller may only appoint a processor/Cloud Service Provider (CSP) when it can be proven that the processor/CSP has the needed:
More information about this topic, including all downloadable documents, is available for Beltug members:
just login for easy and fast access.
Not yet a Beltug member? Our website offers plenty of exclusive insights and tools: read more about the benefits of a Beltug membership.
Click here to login.
The Beltug Team
