GDPR in IT contracts: what to consider when developers access personal data databases

This presentation provides practical insights into:

• Unauthorised developer access to personal data through an API and its implications for the customer.
• Failure to fulfil controller obligations under Articles 13 and 14 GDPR.
• Whether a controller can shift responsibility for personal data protection to a processor.