{
  "$TMF_VERSION": "1.4",
  "PublicationDateTime": "2025-05-15T00:00:00.000Z",
  "Description": "Profile of requirements from the General Data Protection Regulation (GDPR) (EU) 2016/679 for the role of a Data Processor.",
  "Keywords": [
    "GDPR",
    "Data Protection",
    "Privacy",
    "Data Privacy",
    "Data Processor"
  ],
  "Issuer": {
    "Identifier": "https://trustmarkinitiative.org/",
    "PrimaryContact": {
      "Email": "help@trustmarkinitiative.org",
      "Telephone": "555-555-5555",
      "Kind": "PRIMARY",
      "WebsiteURL": "https://trustmarkinitiative.org/",
      "Responder": ""
    },
    "Name": "TMI"
  },
  "Sources": [{
    "Identifier": "GDPR",
    "Reference": "General Data Protection Regulation (GDPR) (EU) 2016/679, as published in the Official Journal of the European Union (OJ L 119, 4.5.2016, p. 1-88).",
    "$id": "source2183071"
  }],
  "Name": "GDPR Data Processor Compliance Profile",
  "TrustExpression": "TD_AppointmentofEURepresentativebyNonEUEntities and TD_AvailabilityoftheEURepresentativetoSupervisoryAuthoritiesandDataSubjects and TD_ProcessingofPersonalDataOnlyonDocumentedInstructions and TD_ConfidentialityofAuthorizedPersonnel and TD_AssistancetoControllerinRespondingtoDataSubjectRequests and TD_AssistanceinEnsuringCompliancewithArticles32to36 and TD_ReturnorDeletionofPersonalDataafterProcessing and TD_AvailabilityforAuditsandInspections and TD_UseofSubProcessorsUnderEquivalentContractTerms and TD_RestrictionofProcessingtoDocumentedInstructions and TD_MaintenanceofRecordsofProcessingActivitiesbytheDataProcessor and TD_CooperationwiththeSupervisoryAuthority and TD_ImplementationofAppropriateSecurityMeasures and TD_NotificationofPersonalDataBreachtotheDataController and TD_DesignationofaDataProtectionOfficerUnderSpecifiedConditions and TD_DesignationoftheDataProtectionOfficerBasedonExpertiseandProfessionalQualities and TD_PublicCommunicationandSupervisoryAuthorityNotificationoftheDataProtectionOfficer and TD_InvolvementoftheDataProtectionOfficerinAllDataProtectionMatters and TD_SupportfortheDataProtectionOfficersTasks and TD_SafeguardsfortheIndependenceandNonPenalizationoftheDataProtectionOfficer and TD_DefinitionandSupportofDataProtectionOfficerResponsibilities and TD_AdherencetoApprovedCodesofConductwithMonitoring and TD_CompliancewithAccreditedMonitoringBodyforCodesofConduct and TD_CooperationwithCertificationBodies and TD_CompliancewithGDPRRequirementsforInternationalDataTransfers and TD_RelianceonAdequacyDecisionsforDataTransfers and TD_ImplementationofAppropriateSafeguardsforInternationalTransfers and TD_UseofApprovedBindingCorporateRulesforGroupTransfers and TD_RestrictiononThirdCountryAccessWithoutEULegalAuthorization and TD_UseofDerogationsforInternationalDataTransfersWithoutSafeguards and TD_LiabilityforGDPRViolationsCausingDamage and TD_AccountabilityforCompliancewiththeGDPRSubjecttoFines",
  "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tips/gdpr-data-processor-compliance-profile/1.0/",
  "Version": "1.0",
  "References": {"TrustmarkDefinitionRequirements": [
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/appointment-of-eu-representative-by-non-eu-entities/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(1).",
      "Number": 1,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/appointment-of-eu-representative-by-non-eu-entities/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(1).",
        "Number": 1,
        "Version": "1.0",
        "Name": "Appointment of EU Representative by Non-EU Entities"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Appointment of EU Representative by Non-EU Entities",
      "$id": "TD_AppointmentofEURepresentativebyNonEUEntities"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/availability-of-the-eu-representative-to-supervisory-authorities-and-data-subjects/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(3).",
      "Number": 2,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/availability-of-the-eu-representative-to-supervisory-authorities-and-data-subjects/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(3).",
        "Number": 2,
        "Version": "1.0",
        "Name": "Availability of the EU Representative to Supervisory Authorities and Data Subjects"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Availability of the EU Representative to Supervisory Authorities and Data Subjects",
      "$id": "TD_AvailabilityoftheEURepresentativetoSupervisoryAuthoritiesandDataSubjects"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/processing-of-personal-data-only-on-documented-instructions/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(a).",
      "Number": 3,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/processing-of-personal-data-only-on-documented-instructions/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(a).",
        "Number": 3,
        "Version": "1.0",
        "Name": "Processing of Personal Data Only on Documented Instructions"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Processing of Personal Data Only on Documented Instructions",
      "$id": "TD_ProcessingofPersonalDataOnlyonDocumentedInstructions"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/confidentiality-of-authorized-personnel/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(b).",
      "Number": 4,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/confidentiality-of-authorized-personnel/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(b).",
        "Number": 4,
        "Version": "1.0",
        "Name": "Confidentiality of Authorized Personnel"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Confidentiality of Authorized Personnel",
      "$id": "TD_ConfidentialityofAuthorizedPersonnel"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/assistance-to-controller-in-responding-to-data-subject-requests/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(d).",
      "Number": 5,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/assistance-to-controller-in-responding-to-data-subject-requests/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(d).",
        "Number": 5,
        "Version": "1.0",
        "Name": "Assistance to Controller in Responding to Data Subject Requests"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Assistance to Controller in Responding to Data Subject Requests",
      "$id": "TD_AssistancetoControllerinRespondingtoDataSubjectRequests"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/assistance-in-ensuring-compliance-with-articles-32-to-36/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(e).",
      "Number": 6,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/assistance-in-ensuring-compliance-with-articles-32-to-36/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(e).",
        "Number": 6,
        "Version": "1.0",
        "Name": "Assistance in Ensuring Compliance with Articles 32 to 36"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Assistance in Ensuring Compliance with Articles 32 to 36",
      "$id": "TD_AssistanceinEnsuringCompliancewithArticles32to36"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/return-or-deletion-of-personal-data-after-processing/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(f).",
      "Number": 7,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/return-or-deletion-of-personal-data-after-processing/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(f).",
        "Number": 7,
        "Version": "1.0",
        "Name": "Return or Deletion of Personal Data after Processing"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Return or Deletion of Personal Data after Processing",
      "$id": "TD_ReturnorDeletionofPersonalDataafterProcessing"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/availability-for-audits-and-inspections/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(g).",
      "Number": 8,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/availability-for-audits-and-inspections/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(g).",
        "Number": 8,
        "Version": "1.0",
        "Name": "Availability for Audits and Inspections"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Availability for Audits and Inspections",
      "$id": "TD_AvailabilityforAuditsandInspections"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/use-of-sub-processors-under-equivalent-contract-terms/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(h).",
      "Number": 9,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/use-of-sub-processors-under-equivalent-contract-terms/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(h).",
        "Number": 9,
        "Version": "1.0",
        "Name": "Use of Sub-Processors Under Equivalent Contract Terms"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Use of Sub-Processors Under Equivalent Contract Terms",
      "$id": "TD_UseofSubProcessorsUnderEquivalentContractTerms"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/restriction-of-processing-to-documented-instructions/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 29.",
      "Number": 10,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/restriction-of-processing-to-documented-instructions/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 29.",
        "Number": 10,
        "Version": "1.0",
        "Name": "Restriction of Processing to Documented Instructions"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Restriction of Processing to Documented Instructions",
      "$id": "TD_RestrictionofProcessingtoDocumentedInstructions"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/maintenance-of-records-of-processing-activities-by-the-data-processor/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 30(2).",
      "Number": 11,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/maintenance-of-records-of-processing-activities-by-the-data-processor/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 30(2).",
        "Number": 11,
        "Version": "1.0",
        "Name": "Maintenance of Records of Processing Activities by the Data Processor"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Maintenance of Records of Processing Activities by the Data Processor",
      "$id": "TD_MaintenanceofRecordsofProcessingActivitiesbytheDataProcessor"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-the-supervisory-authority/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 31.",
      "Number": 12,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-the-supervisory-authority/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 31.",
        "Number": 12,
        "Version": "1.0",
        "Name": "Cooperation with the Supervisory Authority"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Cooperation with the Supervisory Authority",
      "$id": "TD_CooperationwiththeSupervisoryAuthority"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-security-measures/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 32(1).",
      "Number": 13,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-security-measures/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 32(1).",
        "Number": 13,
        "Version": "1.0",
        "Name": "Implementation of Appropriate Security Measures"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Implementation of Appropriate Security Measures",
      "$id": "TD_ImplementationofAppropriateSecurityMeasures"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/notification-of-personal-data-breach-to-the-data-controller/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 33(2).",
      "Number": 14,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/notification-of-personal-data-breach-to-the-data-controller/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 33(2).",
        "Number": 14,
        "Version": "1.0",
        "Name": "Notification of Personal Data Breach to the Data Controller"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Notification of Personal Data Breach to the Data Controller",
      "$id": "TD_NotificationofPersonalDataBreachtotheDataController"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-a-data-protection-officer-under-specified-conditions/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(1).",
      "Number": 15,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-a-data-protection-officer-under-specified-conditions/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(1).",
        "Number": 15,
        "Version": "1.0",
        "Name": "Designation of a Data Protection Officer Under Specified Conditions"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Designation of a Data Protection Officer Under Specified Conditions",
      "$id": "TD_DesignationofaDataProtectionOfficerUnderSpecifiedConditions"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-the-data-protection-officer-based-on-expertise-and-professional-qualities/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(5).",
      "Number": 16,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-the-data-protection-officer-based-on-expertise-and-professional-qualities/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(5).",
        "Number": 16,
        "Version": "1.0",
        "Name": "Designation of the Data Protection Officer Based on Expertise and Professional Qualities"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Designation of the Data Protection Officer Based on Expertise and Professional Qualities",
      "$id": "TD_DesignationoftheDataProtectionOfficerBasedonExpertiseandProfessionalQualities"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/public-communication-and-supervisory-authority-notification-of-the-data-protection-officer/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(7).",
      "Number": 17,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/public-communication-and-supervisory-authority-notification-of-the-data-protection-officer/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(7).",
        "Number": 17,
        "Version": "1.0",
        "Name": "Public Communication and Supervisory Authority Notification of the Data Protection Officer"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Public Communication and Supervisory Authority Notification of the Data Protection Officer",
      "$id": "TD_PublicCommunicationandSupervisoryAuthorityNotificationoftheDataProtectionOfficer"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/involvement-of-the-data-protection-officer-in-all-data-protection-matters/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(1).",
      "Number": 18,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/involvement-of-the-data-protection-officer-in-all-data-protection-matters/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(1).",
        "Number": 18,
        "Version": "1.0",
        "Name": "Involvement of the Data Protection Officer in All Data Protection Matters"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Involvement of the Data Protection Officer in All Data Protection Matters",
      "$id": "TD_InvolvementoftheDataProtectionOfficerinAllDataProtectionMatters"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/support-for-the-data-protection-officer_s-tasks/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(2).",
      "Number": 19,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/support-for-the-data-protection-officer_s-tasks/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(2).",
        "Number": 19,
        "Version": "1.0",
        "Name": "Support for the Data Protection Officer's Tasks"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Support for the Data Protection Officer's Tasks",
      "$id": "TD_SupportfortheDataProtectionOfficersTasks"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/safeguards-for-the-independence-and-non-penalization-of-the-data-protection-officer/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(3).",
      "Number": 20,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/safeguards-for-the-independence-and-non-penalization-of-the-data-protection-officer/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(3).",
        "Number": 20,
        "Version": "1.0",
        "Name": "Safeguards for the Independence and Non-Penalization of the Data Protection Officer"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Safeguards for the Independence and Non-Penalization of the Data Protection Officer",
      "$id": "TD_SafeguardsfortheIndependenceandNonPenalizationoftheDataProtectionOfficer"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/definition-and-support-of-data-protection-officer-responsibilities/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 39(1).",
      "Number": 21,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/definition-and-support-of-data-protection-officer-responsibilities/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 39(1).",
        "Number": 21,
        "Version": "1.0",
        "Name": "Definition and Support of Data Protection Officer Responsibilities"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Definition and Support of Data Protection Officer Responsibilities",
      "$id": "TD_DefinitionandSupportofDataProtectionOfficerResponsibilities"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/adherence-to-approved-codes-of-conduct-with-monitoring/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 40(4).",
      "Number": 22,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/adherence-to-approved-codes-of-conduct-with-monitoring/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 40(4).",
        "Number": 22,
        "Version": "1.0",
        "Name": "Adherence to Approved Codes of Conduct with Monitoring"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Adherence to Approved Codes of Conduct with Monitoring",
      "$id": "TD_AdherencetoApprovedCodesofConductwithMonitoring"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-accredited-monitoring-body-for-codes-of-conduct/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 41(4).",
      "Number": 23,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-accredited-monitoring-body-for-codes-of-conduct/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 41(4).",
        "Number": 23,
        "Version": "1.0",
        "Name": "Compliance with Accredited Monitoring Body for Codes of Conduct"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Compliance with Accredited Monitoring Body for Codes of Conduct",
      "$id": "TD_CompliancewithAccreditedMonitoringBodyforCodesofConduct"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-certification-bodies/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 42(3).",
      "Number": 24,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-certification-bodies/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 42(3).",
        "Number": 24,
        "Version": "1.0",
        "Name": "Cooperation with Certification Bodies"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Cooperation with Certification Bodies",
      "$id": "TD_CooperationwithCertificationBodies"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-gdpr-requirements-for-international-data-transfers/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 44.",
      "Number": 25,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-gdpr-requirements-for-international-data-transfers/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 44.",
        "Number": 25,
        "Version": "1.0",
        "Name": "Compliance with GDPR Requirements for International Data Transfers"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Compliance with GDPR Requirements for International Data Transfers",
      "$id": "TD_CompliancewithGDPRRequirementsforInternationalDataTransfers"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-adequacy-decisions-for-data-transfers/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 45(1).",
      "Number": 26,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-adequacy-decisions-for-data-transfers/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 45(1).",
        "Number": 26,
        "Version": "1.0",
        "Name": "Reliance on Adequacy Decisions for Data Transfers"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Reliance on Adequacy Decisions for Data Transfers",
      "$id": "TD_RelianceonAdequacyDecisionsforDataTransfers"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-safeguards-for-international-transfers/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 46(1).",
      "Number": 27,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-safeguards-for-international-transfers/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 46(1).",
        "Number": 27,
        "Version": "1.0",
        "Name": "Implementation of Appropriate Safeguards for International Transfers"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Implementation of Appropriate Safeguards for International Transfers",
      "$id": "TD_ImplementationofAppropriateSafeguardsforInternationalTransfers"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/use-of-approved-binding-corporate-rules-for-group-transfers/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 47(1).",
      "Number": 28,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/use-of-approved-binding-corporate-rules-for-group-transfers/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 47(1).",
        "Number": 28,
        "Version": "1.0",
        "Name": "Use of Approved Binding Corporate Rules for Group Transfers"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Use of Approved Binding Corporate Rules for Group Transfers",
      "$id": "TD_UseofApprovedBindingCorporateRulesforGroupTransfers"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/restriction-on-third-country-access-without-eu-legal-authorization/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 48.",
      "Number": 29,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/restriction-on-third-country-access-without-eu-legal-authorization/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 48.",
        "Number": 29,
        "Version": "1.0",
        "Name": "Restriction on Third-Country Access Without EU Legal Authorization"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Restriction on Third-Country Access Without EU Legal Authorization",
      "$id": "TD_RestrictiononThirdCountryAccessWithoutEULegalAuthorization"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/use-of-derogations-for-international-data-transfers-without-safeguards/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 49(1).",
      "Number": 30,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/use-of-derogations-for-international-data-transfers-without-safeguards/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 49(1).",
        "Number": 30,
        "Version": "1.0",
        "Name": "Use of Derogations for International Data Transfers Without Safeguards"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Use of Derogations for International Data Transfers Without Safeguards",
      "$id": "TD_UseofDerogationsforInternationalDataTransfersWithoutSafeguards"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/liability-for-gdpr-violations-causing-damage/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 82(2)-(3).",
      "Number": 31,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/liability-for-gdpr-violations-causing-damage/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 82(2)-(3).",
        "Number": 31,
        "Version": "1.0",
        "Name": "Liability for GDPR Violations Causing Damage"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Liability for GDPR Violations Causing Damage",
      "$id": "TD_LiabilityforGDPRViolationsCausingDamage"
    },
    {
      "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/accountability-for-compliance-with-the-gdpr-subject-to-fines/1.0/",
      "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 83(2)-(6).",
      "Number": 32,
      "Version": "1.0",
      "TrustmarkDefinitionReference": {
        "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/accountability-for-compliance-with-the-gdpr-subject-to-fines/1.0/",
        "Description": "Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 83(2)-(6).",
        "Number": 32,
        "Version": "1.0",
        "Name": "Accountability for Compliance with the GDPR, Subject to Fines"
      },
      "$Type": "TrustmarkDefinitionRequirement",
      "Name": "Accountability for Compliance with the GDPR, Subject to Fines",
      "$id": "TD_AccountabilityforCompliancewiththeGDPRSubjecttoFines"
    }
  ]},
  "Primary": "true",
  "LegalNotice": "This artifact is published by the Georgia Tech Research Institute (GTRI) as part of the Trustmark Initiative. This artifact and the information contained herein is provided on an \"AS IS\" basis, and GTRI disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, GTRI disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.",
  "$Type": "TrustInteroperabilityProfile"
}