Supplier Due Diligence and Contracts

Your supply chain is often your biggest data protection risk. Under the GDPR, you can outsource data processing activities but not the responsibility for them. Fort Privacy provides a comprehensive supplier due diligence service that evaluates your processors’ technical and organisational measures, security measures and compliance capabilities before you commit to a relationship — and on an ongoing basis thereafter. We review existing Data Processing Agreements to ensure they meet current regulatory requirements, identify gaps or weaknesses, and work with you to bring agreements up to standard. For organisations managing large supplier portfolios, we help develop scalable due diligence processes and risk-based prioritisation so you can focus your effort where the risk is greatest.