Is performing backups a separate processing activity?
ANSWER
This should not be treated as a separate processing activity, but only as one of the technical and organisational measures used to ensure data security (Article 32(1) GDPR).

GDPR: QUESTIONS AND ANSWERS
This should not be treated as a separate processing activity, but only as one of the technical and organisational measures used to ensure data security (Article 32(1) GDPR).
„The data of our employees and contractors is secure."
Are you sure about that?
