Updating Your Vendor Agreements To Comply With GDPR

If you have been keeping up with the upcoming EU General Data Protection Regulation, you are likely already aware of the myriad steps that you must complete within your organization before May 2018 in order to comply. For example, you may need to appoint a data protection officer, depending on the types of processing your company conducts. But another important and potentially time-consuming step that you need to complete is the review of your agreements with third-party vendors that will have access to your EU personal data to ensure those agreements comply with the GDPR. Even if your agreements already comply with the EU Data Protection Directive, you may still need to update those agreements to meet the new requirements of the GDPR. This article discusses some of the issues to consider as you review your vendor agreements for GDPR compliance. Editor's note: Alexandra Ross recently wrote on a similar topic in the March edition of The Privacy Advisor.