At the top of virtually every list of organizational privacy risks sits third-party vendors. Now, with the coming into force of the EU General Data Protection Regulation, your relationships and contracts with vendors are even more important. In this ninth installment of the "Top 10 Operational Responses to the GDPR" series, IAPP DPO and Research Director Rita Heimes, CIPP/E, CIPP/US, CIPM, offers practical advice for understanding the risks associated with vendors, how controllers and processors may need to rethink their relationships, and what steps to take toward locking down your vendor contracts.
Full Story