Should a data processing agreement be concluded with a company that configures computer equipment?
ANSWER
It is necessary to assess whether the entity configuring the equipment may have access to data. Where equipment is being configured on which there are not yet any data, e.g. a new laptop or new monitoring equipment, there is no need to conclude a data processing agreement, because there is not even potential access to data.
Where already used equipment is being configured and potential access to data exists during configuration, concluding a data processing agreement with the entity configuring the equipment is justified.
