Wherever a sub-processor is engaged, a similar data security obligations from the contract concerning the controller and processor should be imposed within the sub-processor by way of contract or other “organisational steps.”[forty five] The processor will keep on being thoroughly liable to your controller for performance in the sub-processor’s obligations. https://health-lists.com/story18243206/cyber-security-services-in-saudi-arabia