If you’re a privacy professional tasked with ensuring your company is in compliance with the upcoming General Data Protection Regulation requirements, one of your main challenges may be communicating the profound shift in how the GDPR delineates the roles and responsibilities of “controllers” and “processors.” With this shift in responsibility, companies will need to establish more rigorous practices for managing their relationships with vendors who act as processors. In this exclusive for The Privacy Advisor, Alexandra Ross, CIPP/E, CIPP/US, CIPM, FIP, has tips for how to prep for vendor management under the GDPR.
Full Story