An Article 28 processor agreement: Which contract feature is decisive?
The decisive feature is an Article 28 processor agreement covering the stated obligations.
The question
Under the GDPR in the European Union, a manufacturer determines the purposes and means of using production images for quality control and hires a processor. The arrangement must cover instructions, confidentiality, security, rights assistance, subprocessor controls, and deletion or return of data. Which contract feature is decisive?
Preparing for AIGP? Take the free 5-min readiness quiz →
- A confidentiality clause plus a quality-performance warranty.Those provisions may be useful, but neither supplies the complete processor arrangements required for the stated processing.
- A description of the supplier’s software.A capability description does not establish the processor’s legally relevant duties.
- A warranty that every quality target will be met, with audit rights.Performance and audit terms do not by themselves document all required instructions, assistance, security, subprocessor, and deletion or return obligations.
- An Article 28 processor agreement. ✓An Article 28 arrangement is the contract mechanism for documenting instructions and the required assistance, security, subprocessor, and deletion or return duties.
The trap
Identify the controller–processor relationship first, then look for an Article 28 arrangement rather than a single contractual safeguard. How to remember it
The decisive feature is an Article 28 processor agreement covering the stated obligations.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Controller processing for the supplier’s independent reuse: How should the supplier’s reuse be characterized? →
- A DPIA addressing necessity: What must the bank complete before processing begins? →
- Seek prior consultation with the competent supervisory: What is the required next governance step before →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.