In its Opinion 22/2024, dated 9 October 2024, the European Data Protection Board (EDPB) clarifies data controllers’ responsibilities under Article 28 of the GDPR when engaging processors and sub-processors. This summary outlines key takeaways from the Opinion. Identification of all processors and sub-processors: a fundamental responsibility for controllers: In the increasingly complex landscape of data […]