In which a sub-processor is engaged, the identical data safety obligations from the agreement involving the controller and processor need to be imposed to the sub-processor By means of contract or other “organisational measures.”[45] The processor will continue being totally liable on the controller for performance with the sub-processor’s obligations. https://bookmarkshut.com/story18249193/cybersecurity-consulting-services-in-saudi-arabia