Where by a sub-processor is engaged, the same information protection obligations in the deal between the controller and processor should be imposed about the sub-processor by way of contract or other “organisational actions.”[45] The processor will remain absolutely liable into the controller for performance of the sub-processor’s obligations. Documents must https://totalbookmarking.com/story17699096/cyber-security-services-in-usa