It covers the subject and duration of processing, instructions, confidentiality, security, sub-processors, assistance with data subject rights, deletion or return of data, and audits. Assurance reports such as SOC 2 are often accepted as part of the audit rights.
See GDPR.
Read more
Related terms
- GDPR
- The GDPR is the EU General Data Protection Regulation, which governs how personal data of people in the EU is processed and protected.
- Standard contractual clauses
- Standard contractual clauses are the European Commission's model terms for transferring personal data from the EU to countries without an adequacy decision.
- Third-party risk management
- Third-party risk management is the work of identifying, assessing and monitoring the risks that vendors and other third parties bring to an organization.