Agent WranglersProcessors and transfers Required
Publish your subprocessors
If you process personal data for business customers, publish your subprocessor list at a stable address and tell customers before you add one.
How to do it
Generate the page from the vendor register entries marked as subprocessors, with name, purpose and region. Under Article 28(2), a general approval in your agreement only works if customers hear about changes and can object. A notice period of 30 days is common, so promise a number and keep it. Offer an email list or a feed for changes.
How to check
A test compares the published page with the register and fails on any difference. For each subprocessor, its start date is at least the promised number of days after its change notice date.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers compliance playbook: https://agentwranglers.se/playbook/compliance/processors-and-transfers/subprocessor-list.