Should an organizational unit subordinate to the Municipality Office conclude a data processing agreement with the Office if the Office provides email on its secure platform?
ANSWER
As a rule, yes, a data processing agreement should be concluded. Organizational units are as a rule independent data controllers from the municipality. If therefore the municipality provides email on its platform, a data processing agreement should be concluded.
