Source note · UCaaS and CCaaS procurement and RFP evaluation
GDPR Article 28(2) bars a processor from engaging another processor without the controller's prior specific or general written authorisation; under general authorisation the processor must inform the controller of changes so the controller can object.
Checked 2026-09-24
The processor shall not engage another processor without prior specific or general written authorisation of the controller.
- Vendor
- EU
- Product
- GDPR
- Subsystem
- processor contracts
- Deployment
- any
- Region
- eu
- Release range
- Regulation (EU) 2016/679
- Checked
- 2026-09-24
Sources
- Regulation (EU) 2016/679 General Data Protection Regulation — Publications Office of the European Union (EUR-Lex) · tier 1 standards and regulators · Article 28(2)
Cite this note
APA
WarmTransfer. (2026, September 24). UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-gdpr-subprocessor-auth. WarmTransfer. https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-gdpr-subprocessor-auth
BibTeX
@misc{warmtransfer-claim-ucaas-ccaas-procurement-gdpr-subprocessor-auth,
title = {UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-gdpr-subprocessor-auth},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-gdpr-subprocessor-auth},
note = {Source note ucaas-ccaas-procurement-gdpr-subprocessor-auth, checked 2026-09-24}
}