„The data of our employees and contractors is secure."
Are you sure about that?
Article 19 GDPR
Obligation to notify rectification or deletion of personal data or restriction of processing
P: 62
The controller shall inform each recipient to whom the personal data have been disclosed of any rectification, erasure, or restriction of processing carried out in accordance with Article 16, Article 17(1), and Article 18, unless this proves impossible or involves a disproportionate effort. The controller shall inform the data subject of those recipients if the data subject requests it.
