Where by a sub-processor is engaged, the same details security obligations while in the deal concerning the controller and processor needs to be imposed over the sub-processor By means of contract or other “organisational steps.”[45] The processor will stay totally liable to the controller for performance on the sub-processor’s obligations. https://webapplicationsecuritytestingusa.blogspot.com/