What you see here
You reach this screen from the menu under My Third Party Dossier, second item Processes others share. The page title is Processes others share.
The previous screen was about data you share. Here it is the other way round: another company shares personal data with you, for example because you keep their books, maintain their website or run their payroll. That third party is the controller and you are the processor. GDPR expects that relationship to be covered by a data processing agreement as well. Either you or the third party can initiate the paperwork.
Each card shows the process, the marker You are the processor and Received from with the company name. It carries one of these statuses:
- Not yet accepted: you have not answered this request.
- Request accepted: the agreement is in place.
- Rejected request: you declined the request.
- Stopped: the request was stopped.
If nothing has come in yet, you see No processes recorded yet. Below the list sits the block Initiate data processor agreement with the tile Register a processing activity, for data you process on behalf of a controller who has not sent a request yet.
What is expected of you
- Open a received request. In the preview Incoming request from third party you review the email and the data processing agreement the other party drew up.
- If it is correct, click Accept. Tick I process this data in accordance with the GDPR provisions and confirm the request.
- If it is not correct, click Decline. The app asks why you rejected the request. Give a short reason and click Send, so the other party knows what to change.
- If you work for a client who never sends a request, click Register a processing activity and describe yourself which data you process on their behalf.
- Drag to reorder and add notes on any card, just like in the other dossiers.
Next step
When every card shows Request accepted, this screen is done. Data you share with others yourself lives on Processes we share with others. The accepted agreements are collected on the Data Sharing Agreements tab under GDPR Documents. To reread the difference between processor and controller at your own pace, see Your Third-Party Dossier: With Whom Is Data Shared?.
Watch the video
The Third-Party Dossier video shows how the two directions of the dossier fit together: watch the Third-Party Dossier video.