How do I effectively document data processors and DPA information in OneTrust?
Manage service providers as a separate entity and link them to the affected processing activities. Document their role, scope of services, sub-service providers, hosting, security measures, audit rights, deletion concept, and control mechanisms. Store Data Processing Agreements (DPA) centrally as proof and reference the version, date, and scope. This ensures the documentation remains maintainable and auditable. Support: /mein-shop/p/datenschutzrechtliche-verarbeitung