Notification of breaches by the Processor. The Processor supports and assists the Controller in complying with the duties under Articles 32 to 36 GDPR to ensure the security of personal data, the duty to report any data breaches as well as in the data protection impact assessment and in prior consultations. This includes among other things
Notification of breaches by the Processor. 8.1. The Processor supports and assists the Controller in complying with the duties under Articles 32 to 36 GDPR to ensure the security of personal data, the duty to report breaches reportable under the GDPR, and any data protection impact assessments as the need arises. This includes among other things: (a) ensuring adequate security standards through the technical and organizational measures which take into account the circumstances and purposes of data processing and the anticipated likelihood and severity of a possible data breach; (b) informing Controller of any reportable breaches of personal data under the GDPR to the Controller without undue delay; (c) supporting and assisting the Controller in its duty to inform data subjects and, in this context, provide the Controller with all relevant information without undue delay; (d) supporting and assisting the Controller in assessing the data protection impact of activities under the RSA; and (e) supporting and assisting the Controller in prior consultations with any relevant regulatory authority.
Notification of breaches by the Processor. (1) The Processor shall inform the Controller of violations of the protection of personal data, disturbances, breaches of data protection regulations or the specifications made in a specific agreement by the Processor or persons employed by them or engaged by them. This is especially the case with regard to any legal obliga- tions of the Controller to notify data subjects or the supervisory authorities.
