Should a data processing agreement be concluded with a tax advisory firm?

ANSWER

If a tax advisory firm is to conduct an audit at the controller's entity as an external entity acting on the controller's commission, it will be appropriate to conclude a data processing agreement.

In such a case the data controller will pass personal data for the purpose of conducting the audit it commissions. The tax adviser will therefore act on behalf of the controller.