Where a sub-processor is engaged, a similar data security obligations inside the deal between the controller and processor needs to be imposed to the sub-processor By the use of contract or other “organisational actions.”[45] The processor will keep on being completely liable for the controller for performance in the sub-processor’s https://tbookmark.com/story17575209/cyber-security-consulting-in-usa