GDPR contract reviews – have you started? “Data controller obligations under GDPR will trigger additional contract provisions based on the scope of work, category of personal data, and the types of data processor relationships. Article 24 (1), Article 29 and Article 46(1) define specific obligations for controllers that impact data processing and thus the data processor contract. Operational considerations for the processing of data and appropriate safeguards will trigger additional data protection contract provisions.”
