Prior Authorization
Under the General Data Protection Regulation, a processor may not engage another processor without prior authorization of the data controller. This authorization may be general or specific. If it is general, the processor is required to give the controller an opportunity to object to the addition or replacement of other processors.
All terms