In which a sub-processor is engaged, exactly the same facts defense obligations inside the contract in between the controller and processor has to be imposed within the sub-processor by way of contract or other “organisational steps.”[45] The processor will stay thoroughly liable to the controller for performance in the sub-processor’s https://medium.com/@cybersecurityservice/data-privacy-compliance-in-saudi-arabia-ed1d6e9bc078