Where By a sub-processor is engaged, the same data security obligations from the contract between the controller and processor must be imposed over the sub-processor By the use of contract or other “organisational steps.”[45] The processor will remain totally liable into the controller for performance in the sub-processor’s obligations. *This https://cybersecurityservicesinsaudiarabia.blogspot.com/