Where A sub-processor is engaged, the identical facts protection obligations within the contract concerning the controller and processor should be imposed within the sub-processor Through contract or other “organisational steps.”[45] The processor will continue to be thoroughly liable on the controller for performance on the sub-processor’s obligations. Protect cardholder data. https://telebookmarks.com/story7842184/cyber-security-services-in-usa