Gesetz: DSGVO 28 
EDPB: Opi­ni­on 22/2024 on pro­ces­sors and sub-processors
Ger­man aut­ho­ri­ties: Check­list for ADV; high requi­re­ments for order pro­ce­s­sing agreements.
AEPD (Spain): Fines against order pro­ces­sor for refu­sal to hand over data
CNIL: Gui­de­lines on the fur­ther use of data by order processors
EDSA: Final ver­si­on of the gui­de­lines on con­trol­lers and processors
Con­trol­lers and pro­ces­sors: On the EDPB gui­de­lines (draft) on the “con­trol­ler” and “pro­ces­sor”
EDPB: Draft gui­de­lines on the “con­trol­ler” and “pro­ces­sor”
LfD Nie­der­sach­sen: FAQ on com­mis­sio­ned pro­ce­s­sing; notes on the “focal point theory”.
Pro­po­sal for a two-tier model of data exch­an­ge bet­ween respon­si­ble parties
1 2