Where a sub-processor is engaged, a similar data protection obligations within the contract among the controller and processor should be imposed around the sub-processor By the use of contract or other “organisational measures.”[forty five] The processor will continue being thoroughly liable to your controller for performance on the sub-processor’s obligations. https://top100bookmark.com/story17822078/cyber-security-consulting-in-usa