https://artifacts.trustmarkinitiative.org/lib/tips/gdpr-data-processor-compliance-profile/1.0/GDPR Data Processor Compliance Profile1.0Profile of requirements from the General Data Protection Regulation (GDPR) (EU) 2016/679 for the role of a Data Processor.2025-05-15T00:00:00.000ZtrueThis artifact is published by the Georgia Tech Research Institute (GTRI) as part of the Trustmark Initiative. This artifact and the information contained herein is provided on an "AS IS" basis, and GTRI disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, GTRI disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.https://trustmarkinitiative.org/TMIPRIMARYhelp@trustmarkinitiative.org555-555-5555https://trustmarkinitiative.org/GDPRData ProtectionPrivacyData PrivacyData Processorhttps://artifacts.trustmarkinitiative.org/lib/tds/appointment-of-eu-representative-by-non-eu-entities/1.0/1Appointment of EU Representative by Non-EU Entities1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(1).https://artifacts.trustmarkinitiative.org/lib/tds/availability-of-the-eu-representative-to-supervisory-authorities-and-data-subjects/1.0/2Availability of the EU Representative to Supervisory Authorities and Data Subjects1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(3).https://artifacts.trustmarkinitiative.org/lib/tds/processing-of-personal-data-only-on-documented-instructions/1.0/3Processing of Personal Data Only on Documented Instructions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(a).https://artifacts.trustmarkinitiative.org/lib/tds/confidentiality-of-authorized-personnel/1.0/4Confidentiality of Authorized Personnel1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(b).https://artifacts.trustmarkinitiative.org/lib/tds/assistance-to-controller-in-responding-to-data-subject-requests/1.0/5Assistance to Controller in Responding to Data Subject Requests1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(d).https://artifacts.trustmarkinitiative.org/lib/tds/assistance-in-ensuring-compliance-with-articles-32-to-36/1.0/6Assistance in Ensuring Compliance with Articles 32 to 361.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(e).https://artifacts.trustmarkinitiative.org/lib/tds/return-or-deletion-of-personal-data-after-processing/1.0/7Return or Deletion of Personal Data after Processing1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(f).https://artifacts.trustmarkinitiative.org/lib/tds/availability-for-audits-and-inspections/1.0/8Availability for Audits and Inspections1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(g).https://artifacts.trustmarkinitiative.org/lib/tds/use-of-sub-processors-under-equivalent-contract-terms/1.0/9Use of Sub-Processors Under Equivalent Contract Terms1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3)(h).https://artifacts.trustmarkinitiative.org/lib/tds/restriction-of-processing-to-documented-instructions/1.0/10Restriction of Processing to Documented Instructions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 29.https://artifacts.trustmarkinitiative.org/lib/tds/maintenance-of-records-of-processing-activities-by-the-data-processor/1.0/11Maintenance of Records of Processing Activities by the Data Processor1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 30(2).https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-the-supervisory-authority/1.0/12Cooperation with the Supervisory Authority1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 31.https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-security-measures/1.0/13Implementation of Appropriate Security Measures1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 32(1).https://artifacts.trustmarkinitiative.org/lib/tds/notification-of-personal-data-breach-to-the-data-controller/1.0/14Notification of Personal Data Breach to the Data Controller1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 33(2).https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-a-data-protection-officer-under-specified-conditions/1.0/15Designation of a Data Protection Officer Under Specified Conditions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(1).https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-the-data-protection-officer-based-on-expertise-and-professional-qualities/1.0/16Designation of the Data Protection Officer Based on Expertise and Professional Qualities1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(5).https://artifacts.trustmarkinitiative.org/lib/tds/public-communication-and-supervisory-authority-notification-of-the-data-protection-officer/1.0/17Public Communication and Supervisory Authority Notification of the Data Protection Officer1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(7).https://artifacts.trustmarkinitiative.org/lib/tds/involvement-of-the-data-protection-officer-in-all-data-protection-matters/1.0/18Involvement of the Data Protection Officer in All Data Protection Matters1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(1).https://artifacts.trustmarkinitiative.org/lib/tds/support-for-the-data-protection-officer_s-tasks/1.0/19Support for the Data Protection Officer's Tasks1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(2).https://artifacts.trustmarkinitiative.org/lib/tds/safeguards-for-the-independence-and-non-penalization-of-the-data-protection-officer/1.0/20Safeguards for the Independence and Non-Penalization of the Data Protection Officer1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(3).https://artifacts.trustmarkinitiative.org/lib/tds/definition-and-support-of-data-protection-officer-responsibilities/1.0/21Definition and Support of Data Protection Officer Responsibilities1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 39(1).https://artifacts.trustmarkinitiative.org/lib/tds/adherence-to-approved-codes-of-conduct-with-monitoring/1.0/22Adherence to Approved Codes of Conduct with Monitoring1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 40(4).https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-accredited-monitoring-body-for-codes-of-conduct/1.0/23Compliance with Accredited Monitoring Body for Codes of Conduct1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 41(4).https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-certification-bodies/1.0/24Cooperation with Certification Bodies1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 42(3).https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-gdpr-requirements-for-international-data-transfers/1.0/25Compliance with GDPR Requirements for International Data Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 44.https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-adequacy-decisions-for-data-transfers/1.0/26Reliance on Adequacy Decisions for Data Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 45(1).https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-safeguards-for-international-transfers/1.0/27Implementation of Appropriate Safeguards for International Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 46(1).https://artifacts.trustmarkinitiative.org/lib/tds/use-of-approved-binding-corporate-rules-for-group-transfers/1.0/28Use of Approved Binding Corporate Rules for Group Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 47(1).https://artifacts.trustmarkinitiative.org/lib/tds/restriction-on-third-country-access-without-eu-legal-authorization/1.0/29Restriction on Third-Country Access Without EU Legal Authorization1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 48.https://artifacts.trustmarkinitiative.org/lib/tds/use-of-derogations-for-international-data-transfers-without-safeguards/1.0/30Use of Derogations for International Data Transfers Without Safeguards1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 49(1).https://artifacts.trustmarkinitiative.org/lib/tds/liability-for-gdpr-violations-causing-damage/1.0/31Liability for GDPR Violations Causing Damage1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 82(2)-(3).https://artifacts.trustmarkinitiative.org/lib/tds/accountability-for-compliance-with-the-gdpr-subject-to-fines/1.0/32Accountability for Compliance with the GDPR, Subject to Fines1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 83(2)-(6).GDPRGeneral Data Protection Regulation (GDPR) (EU) 2016/679, as published in the Official Journal of the European Union (OJ L 119, 4.5.2016, p. 1-88).