When discussing the processor’s liability in the event of a breach by the sub-processor it is important to add that this does not affect the rights of the data subjects under GDPR (in particular ...

Consequently, the processor alone may be held responsible for the absence of a data processing agreement between it and the controller. This is probably the most effective outcome to achieve the ...

Although the opinion is from 2010 -- eight years before GDPR took effect -- it still has validity because the governing principles of controller and processor were in effect under a pre-GDPR ...