Third-party products and services
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Third-party products and services
Your organisation considers ‘data protection by design’ when selecting services and products to use in data processing activities.
Ways to meet our expectations:
- When you use third-party products or services to process personal data, you make sure to choose suppliers that design their products or services with data protection in mind.
Can you answer yes to the following questions?
- Do staff consider suppliers’ approach to data protection when using third-party products or services to process personal data?
- Is there a clear way for them to do this?