Supply chain arrangements: The ABC to GDPR compliance

A spotlight on emerging market practice in supplier contracts in the run up to 25 May 2018 and beyond. 

You are only as strong as your weakest link

With increased outsourcing to the cloud or other third party external service providers and an increasingly complex supply chain for businesses, modern strategies for leveraging data can bring significant business efficiencies, competitive edge and growth opportunities, but also a range of risks that need to be understood and mitigated.

This has been mapped by a rise in the increased relevance of data protection and associated regulation. In the words of the Information Commissioner, the EU General Data Protection Regulation (the "GDPR") represents an "evolution" rather than a "revolution" in data protection regulation. Whilst existing data protection obligations have certainly been "tightened up" a notch, fundamentally, the current underlying data protection principles remain largely unchanged.

The new EU data protection framework does, however, introduce some key changes that are giving rise to closer scrutiny of the supply chain protections in place between controllers and processors and, in turn, we are seeing a shift in the approach adopted by both parties in negotiating and implementing data processing arrangements.

Read the full article

The GDPR hub