Data-sharing safeguards: no ‘micro-managing’ – Panopticon
‘Data-sharing arrangements between one controller and another proliferate across all sorts of processing contexts, aimed at all sorts of purposes. If those arrangements are to comply with the GDPR and/or DPA 2018, they need to be structured so as to ensure that the data-sharing satisfies the data protection principles. This includes having “appropriate technical and organisational measures” in place. So far, so clear. But how do you assess whether your measures are “appropriate”? And if push comes to shove, how will a court approach that assessment?’
Panopticon, 25th January 2021
Source: panopticonblog.com
