Agent WranglersPrivacy Required
Sign a contract with every processor
Have a data processing agreement with every service that handles personal data for you, such as hosting, email or analytics.
How to do it
List each processor in your data map, with its agreement and where it stores data. Under GDPR Article 28 the agreement is required. For transfers outside the EU, check the legal basis, such as Standard Contractual Clauses or the EU-US Data Privacy Framework. An appeal against that framework is pending at the EU Court of Justice, so keep the clauses ready as a fallback. See also keep one register of vendors and check each agreement covers Article 28.
How to check
Every processor in the data map has a signed agreement on file, and appears as a recipient in the privacy policy.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/privacy/processor-agreements.