OTHER INSTRUCTIONS. 7.1. If necessary, the Processor assists the Controller to conduct the impact assessments related to the protection of personal data (“DPIA”) pursuant to Article 35 of the GDPR. 7.2. If the Controller considers that the processing represents a high risk for the rights of the Data Subjects as a consequence of the DPIA, the Processor shall support the Controller in first consulting the DPA. 7.3. If, at the end of the consultation, the DPA considers that the processing must be modified, this activity will be carried out by the Processor at its own expense.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Addendum