Common use of Assistance to the Data Controller Clause in Contracts

Assistance to the Data Controller. (a) The processor shall inform the data controller without delay of any request he has received from the data subject. He shall not himself comply with such a request, unless authorized to do so by the data controller. (b) The processor shall assist the controller in fulfilling its obligation to respond to requests from data subjects to exercise their rights, taking into account the nature of the processing. In fulfilling its obligations under points (a) and (b), the processor complies with the controller's instructions. (c) In addition to the processor's obligation to assist the controller under clause 8(b), the processor shall also assist the controller in ensuring compliance with the following obligations, considering the nature of the processing and the information available to the processor: (1) the obligation to carry out an assessment of the impact of proposed processing operations on the protection of personal data ("data protection impact assessment") when a type of processing is likely to present a high risk to the rights and freedoms of natural persons; (2) the obligation to consult the competent supervisory authority(ies) prior to processing where a data protection impact assessment indicates that the processing would present a high risk if the controller did not take steps to mitigate the risk; (3) the obligation to ensure that personal data is accurate and up to date, by informing the controller without delay if the processor becomes aware that the personal data it is processing is inaccurate or has become obsolete. (4) the obligations set out in Article 32 of Regulation (EU) 2016/679.

Assistance to the Data Controller. (a) The processor shall inform the data controller without delay of any request he has received from the data subject. He shall not himself comply with such a request, unless authorized to do so by the data controller. (b) The processor shall assist the controller in fulfilling its obligation to respond to requests from data subjects to exercise their rights, taking into account the nature of the processing. In fulfilling its obligations under points (a) and (b), the processor complies with wit h the controller's instructions. (c) In addition to the processor's obligation to assist the controller under clause 8(b), the processor shall also assist the controller in ensuring compliance with the following obligations, considering the nature of the processing and the information available to the processor: (1) the obligation to carry out an assessment of the impact of proposed processing operations on the protection of personal data ("data protection impact assessment") when a type of processing is likely to present a high risk to the rights and freedoms of natural persons; (2) the obligation to consult the competent supervisory authority(ies) prior to processing where a data protection impact assessment indicates that the processing would present a high risk if the controller did not take steps to mitigate the risk; (3) the obligation to ensure that personal data is accurate and up to date, by informing the controller without delay if the processor becomes aware that the personal data it is processing is inaccurate or has become obsolete. (4) the obligations set out in Article 32 of Regulation (EU) 2016/679.