Germany's new rules on international processor agreements
summary
German law adds 10 key elements that must appear in every processor agreement and imposes an explicit upfront controls duty on the controller to verify a processor’s technical and organizational measures. Guidance narrows controller vs processor by reserving purpose decisions to the controller while allowing providers discretion on technical implementation. The result: multiple-transfer jurisdictional complexity, pressure to use certificates or standard model clauses, and a practical question whether cloud providers can meet contract detail expectations without breaking the service model.
AI-written summary · about
related talks
03m3 questions to – Frederick Richter
05m3 questions to – Bojana Bellamy
40mGDPR in Practice – What's Hot, What's Not
32mWhat's the Latest With ePrivacy & the German TTDSG
33mHandling the New SCC in Practice
47mNew Developments in the Field of Data Protection For a More Successful Data Economy
58mGlobal Data Flows and Perspective – Keynote & Panel
01h 00mAn Existential Crisis for Global Data Flows: Privacy and Security Issues