Require an Article 28 processor arrangement: What procurement decision best addresses the evidence?
Require a complete GDPR Article 28 processor arrangement addressing instructions, confidentiality, security, and subprocessors.
The question
Under the GDPR in the EEA, an energy company will use a vendor as processor for maintenance records. The draft agreement states the service purpose but omits confidentiality, security, and subprocessor controls. What procurement decision best addresses the evidence?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Replace the vendor because GDPR forbids outsourced maintenance processing.The GDPR permits processors when an appropriate Article 28 arrangement and suitable controls are established.
- Require an Article 28 processor arrangement. ✓The company should require an Article 28 arrangement that also covers documented instructions, confidentiality, security, and subprocessors.
- Approve the draft because its service purpose is identified.Purpose language alone does not establish the complete processor arrangement required by the GDPR.
- Add confidentiality wording, then approve deployment.Confidentiality wording alone leaves the identified security and subprocessor omissions unresolved.
The trap
For a processor, check the Article 28 arrangement against all stated contractual gaps. How to remember it
Require a complete GDPR Article 28 processor arrangement addressing instructions, confidentiality, security, and subprocessors.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Classify the provider as controller for its own analytics: Which role best describes that separate activity? →
- Complete a GDPR DPIA before processing: What must happen before processing begins? →
- Consult the competent supervisory authority before launch: What must happen first? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.