GDPR Article 28 Advisory Notice

Article 28 requires that a processor of personal data must inform the controller if they believe an instruction goes against the regulations set out by GDPR or other data protection regulations.

This must be properly documented and recorded in compliance with the regulation. If it is not recorded properly, the processor could incur fines or be found in breach of contract with the controller.

With help from the Chair of the Privacy Working Group, Tim Roe from RedEye, we have created an Advisory Notice you can use to inform a client of a potential non-compliant instruction.

You should complete the notice and send to the client if you believe that an instruction you have received conflicts with the GDPR/Data Protection Act 2018.

Click the blue button below to download the Article 28 Advisory introduction and notice template.

Download now