GDPR – Transparency Obligations For Data Processors

Hello everyone,

Our CTU often supports trials that are not sponsored by our host institution. For such trials, we are usually data processors, processing personal data on behalf of the data controller Sponsors. I’m wondering whether we should be posting transparency wording, along the lines suggested by HRA, on our CTU website, to explain how we process personal data on behalf of the Sponsors. I’m thinking that the wording may be additional to (or supplementary to) the more general wording posted by the University.

How are other units that perform the data processing role approaching this? Any thoughts, suggestions and comments are most welcome.

Thanks 🙂

[Author]

Posts