Q: 20
A German company wants to enter into a binding contract with a processor in the Netherlands for
the processing of sensitive personal data of German data subjects. The Dutch Supervisory Authority
is informed of the type of data and the aims of the processing, including the contract describing what
data will be processed and what data protection procedures and practices will be in place.
According to the GDPR, what should the Dutch Supervisory Authority do in this scenario?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
