Privacy, the protection of personal data, should be proactively realised according to two GDPR principles: ‘by design’ and ‘by default’. What does that mean?
Outsourcing leads to the transfer of personal data to third parties. A contract between the client and the external service provider must safeguard this.