The EDPB adopted an opinion on the obligations of controllers, processors and sub-processors.
In it, European privacy regulators explain how they interpret the law. This Opinion deals with the situation where a data controller engages one or more processors and/or sub-processors. The opinion explains the obligations back and forth and processor agreements.
Source: European Data Protection Board
