An organization decides to outsource its customer personal data analytics to a third party to understand spending habits. Which of the following is the MOST important contractual consideration?

Question

Options

• APlatform architecture used to process the data
• BTerms for continuous monitoring of the vendor
• CClearly defined data responsibilities of all parties
• DThe vendor's vulnerability management program

• A
  4% (1)
• B
  4% (1)
• C
  82% (23)
• D
  11% (3)

Explanation

When outsourcing personal data processing, the contract must clearly define the data responsibilities of all parties - who is the controller, who is the processor, what data can be used for, how it must be protected, and each party's legal obligations. This is mandated by regulations like GDPR. Platform architecture (A) and vulnerability management (D) are technical/security concerns that may be addressed in security annexes but are secondary. Continuous monitoring terms (B) are operational considerations. Clearly defined roles and responsibilities is the foundation of a legally compliant data processing agreement.

No community discussion yet for this question.