Where A sub-processor is engaged, the exact same facts defense obligations in the deal involving the controller and processor have to be imposed on the sub-processor By means of deal or other “organisational measures.”[forty five] The processor will continue being totally liable to the controller for performance of the sub-processor’s https://sites.google.com/view/gdpr-compliance-in-usa/