

Supplier data breaches: your responsibilities as data controller
Under GDPR your suppliers (data processors or joint data controllers) are obliged to tell you "without undue delay" about a data breach they have suffered that has affected data that you are the controller for. For the avoidance of doubt, your...