Controller and processor
Identify who decides why personal data is processed and who handles it on instructions. That drives GDPR and UK GDPR paperwork.
Security and subprocessors
Check security standards, audit rights, and whether subprocessors need approval.
General information only. Not legal advice.
Review your contract