Wherever a sub-processor is engaged, exactly the same info protection obligations within the agreement involving the controller and processor needs to be imposed on the sub-processor by way of deal or other “organisational actions.”[45] The processor will stay completely liable for the controller for performance in the sub-processor’s obligations. Compliance https://sites.google.com/view/gdpr-compliance-in-usa/data-privacy-compliance-in-saudi-arabia