·16 min read
A breach at your supplier: how to chain their notice to your notification
When the breach happens at your processor, notifying the supervisory authority is still your job, and your 72 hours start, in principle, when the processor tells you. What the GDPR, the EDPB and the Spanish AEPD say, what to put in the contract, what to ask on the first call and an hour-by-hour example.
GDPRIncidentsThird-party management
