GDPR Article 28(3)(a) requires the processor to process personal data only on documented instructions from the controller, including instructions on transfers to third countries.

Checked 2026-09-24

Vendor
EU
Product
GDPR
Subsystem
processor contracts
Deployment
any
Region
eu
Release range
Regulation (EU) 2016/679
Checked
2026-09-24

Sources

Cite this note

APA

WarmTransfer. (2026, September 24). UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-gdpr-instructions. WarmTransfer. https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-gdpr-instructions

BibTeX

@misc{warmtransfer-claim-ucaas-ccaas-procurement-gdpr-instructions,
  title  = {UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-gdpr-instructions},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-gdpr-instructions},
  note   = {Source note ucaas-ccaas-procurement-gdpr-instructions, checked 2026-09-24}
}

Read in context