The Catalan Data Protection Authority, in collaboration with the Spanish Data Protection Agency and the Basque Data Protection Agency, has drawn up this guide which aims to identify the key points to take into account in the time to establish the relationship between the controller and the processor, as well as identifying the issues that directly affect the management of the relationship between the two. The modifications incorporated by Organic Law 3/2018, of December 5, on the protection of personal data and guarantee of digital rights (LOPDGDD) are included. It also aims to offer guidelines, by way of recommendation, for drawing up the document that must regulate this relationship.
Highlights