Home / Commercial / Data protection / Data protection essentials

Legal News

Due diligence on processors by controllers under the GDPR

Copyright © 2025 LexisNexis

Published on: 20 August 2018

Published by a LexisNexis Commercial expert

Table of contents

What are the requirements of the General Data Protection Regulation on controllers when appointing processors?
What due diligence should controllers undertake prior to appointing a processor?
How should a controller undertake due diligence on a processor?
To what extent can a controller rely on its processor’s adherence to a code of conduct?
How do controllers ensure ongoing GDPR compliance by their processors?

Article summary

Information Law analysis: James Tarling, partner at Ashtons Legal, discusses the law and evolving practice on controllers undertaking due diligence on processors. James is in Ashtons Legal’s commercial team specialising in information law and is the firm’s appointed data protection officer.

Popular documents

Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements[Insert addressee details]Dear [insert name][It is our understanding that [insert name of prospective employee] [was an employee of yours between the dates of [insert dates as appropriate] OR is a current employee of