Sharing data? Check your contracts.
If you share personal data with a third party, you need to ensure that you are both GDPR compliant and that you have appropriate contracts in place that include data protection clauses. Most companies will likely share data with Accountants, HR companies, Pension companies or use outsource tasks to third-party services such as marketing, IT, or software development. To avoid complaints or a data breach you must ensure you have contracts in place that protect the rights of any data subjects.
This may complicate but rest assure that most companies will already be GDPR compliant and will have appropriate terms in place. However, you must check as if you share your data, you may be liable for any breach or complaint.
Your GDPRlocal.com pack includes everything you need to check your suppliers and template contracts and agreements. If you are a subscriber, you can use the Supplier Check form and we will check for you.
Good luck all.
About the Author
Head of Commercial & Country Manager
Zlatko Delev is Head of Commercial and Country Manager at GDPRLocal, where he leads the company’s commercial strategy and market presence. He brings international experience across sales, marketing, and customer success, along with a legal background from his studies at Iustinianus Primus Law School in Skopje, Macedonia.
Zlatko sits at the front line of GDPRLocal’s client relationships, guiding organisations through the first stages of their compliance journey and helping them understand where they stand and where they need to go on GDPR, information security, and the emerging landscape of AI regulation. His role bridges commercial strategy with practical data protection knowledge, ensuring clients get clear, actionable direction from their very first conversation with GDPRLocal.
Alongside his commercial focus, Zlatko has trained extensively in project management and organisational leadership, including risk management, stakeholder communication, agile methodology, and digital marketing, a broad skill set that supports his structured, delivery-focused approach to growing GDPRLocal’s business internationally.