Certified Information Privacy Professional/Europe (CIPP/E)

A German data subject was the victim of an embarrassing prank 20 years ago. A newspaper website published an article about the prank at the time, and the articl...

What are the obligations of a processor that engages a sub-processor?

What must be included in a written agreement between the controller and processor in relation to processing conducted on the controller’s behalf?

To provide evidence of GDPR compliance, a company performs an internal audit. As a result, it finds a data base, password-protected, listing all the social netw...

There are three domains of security covered by Article 32 of the GDPR that apply to both the controller and the processor. These include all of the following EX...