Any entity processing personal data on your behalf (i.e., your vendors) must have a written contract in place. The GDPR requires specific language in your vendor contracts. Review steps 1–4 below to bring your vendor contracts in compliance with the GDPR.
1. Do we need to amend our existing vendor contracts? If you answer “yes” to the questions below, then you will be required to update your vendor contracts...
Please see full publication below for more information.