Where by a sub-processor is engaged, the exact same info protection obligations during the agreement between the controller and processor needs to be imposed about the sub-processor by way of agreement or other “organisational steps.”[forty five] The processor will continue being fully liable on the controller for performance of your https://sites.google.com/view/gdpr-compliance-in-usa/data-privacy-compliance-in-saudi-arabia