Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data
Chapter III, section 3: confidentiality, security and professional secrecy (Articles 23 to 26) – Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data

Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data 23(2): Article 23(2) to (4): choosing and binding processors

What does 23(2) require?

Where processing is carried out on its behalf, the controller must choose a processor offering sufficient guarantees on technical and organisational security measures and ensure they are complied with. Processing by a processor must be governed by a contract or legal act binding it to the controller and providing in particular that the processor acts only on the controller's instructions and is also bound by the Article 23(1) obligations; for evidence, the data protection elements of the contract and the security requirements are recorded in writing or equivalent form.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter III, section 3: confidentiality, security and professional secrecy (Articles 23 to 26) – Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data controls