5 steps to GDPR-compliant vendor due diligence - DPO Centre

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. Key details to establish: “How personal data will be collected” Where it will be stored

   In Lead source provenance

2. You’ll learn how to: “Review the vendor’s data handling practices” Assess policies and procedures

   In Outbound data vendors

3. Review the vendor’s data handling practices “Assess policies and procedures” Evaluate technical security measures

   In Outbound data vendors

4. Assess policies and procedures “Evaluate technical security measures” Review international data transfer controls and processes

   In Outbound data vendors

5. Evaluate technical security measures “Review international data transfer controls and processes” Mitigate risks & finalise the Data Processor Agreement (DPA)

   In Outbound data vendors

6. Review international data transfer controls and processes “Mitigate risks & finalise the Data Processor Agreement (DPA)” Overview

   In Outbound data vendors

7. According to a report by technavio, the global outsourcing market is expected to grow by $88.8 billion between 2024 and 2029, with a compound annual growth rate of 6.8%. “However, when you have vendors handling personal data, it’s critical to understand the associated data protection responsibilities of both parties.” Under the General Data Protection Regulation (GDPR), vendors include any third parties, partners, or suppliers with access to personal data – not just traditional service providers.

   In Outbound data vendors