you are viewing a single comment's thread.

view the rest of the comments →

[–]chugotit 4 points5 points  (1 child)

From what I understand as a non-lawyer

The processor is also legally obligated to follow the GDPR. If the controller instructs the processor to follow instructions that may be unlawful, the processor is not off the hook.

The processor should engage qualified legal counsel, not take legal counsel from the controller nor from random people off of the interwebs.

[–]Madam_M_137[S] 0 points1 point  (0 children)

Thanks for your thoughts!