New edition of the practical workshop on drafting data processing outsourcing agreements

The Catalan Data Protection Authority (APDCAT), in collaboration with the School of Public Administration of Catalonia (EAPC), is launching a new edition of practical training on the drafting of personal data processing outsourcing agreements on June 2. It is a mandatory document (in the form of a contract or similar legal act) that establishes the conditions and obligations of the parties when an organization - data controller - entrusts the management of data processing (such as payroll management) to an external person or entity (data processor), and with the aim of guaranteeing that all the requirements of the GDPR are met in the processing of data and that the rights of interested parties are protected.

The course, which is taught online until June 22, is intended for staff from the Generalitat, universities and the public sector, as well as from the local level, and goes into more detail on the figures of the controller, co-controller and processor, the regulation of the relationship between the controller and the processor and the content of the agreements.

It responds to the APDCAT's desire for continuous training and improvement of public administration staff in accordance with its 2023-2028 Strategic Plan, so that they acquire the necessary skills to guarantee compliance with data protection regulations and citizens' rights.