Article 7
- The prior approval from the controller that allows the processor to assign the data processing to a third party may be specific or general in its scope.
- In the case of general approval, the processor shall inform the controller of any plan to engage additional or replace existing third parties. The controller may object to such changes.