A subcontractor cannot support the services of a subprocessor without the express or written prior written permission of the processor. When authorization is granted, the subcontractor must enter into a contract with the subcontractor. The contractual terms of Article 28, paragraph 3, must provide a level of protection for personal data equivalent to that of the contract between the processing manager and the subcontractor. Transformers are responsible for processing compliance with the subprocessings they use. 2. The supplier may only transfer subcontractors (other subcontractors) with written or documented prior authorization from the adjudicating entity. It is important not to do work without a formal and written agreement signed by a person authorized to sign on behalf of the University of Arizona. To avoid delays in contracts and agreements, you can contact Contracting Services and/or Procurement and Contracting Services (PACS) in the initial phase of the process. ☐ given the nature of the processing and the information available, the subcontractor assists the processing manager in carrying out his RGPD obligations with respect to processing security, notification of personal data breaches and data protection impact analyses; 1.1.8.2 the transfer of personal data from the company by a contract subcontractor to a subcontractor or between two branches of a commercial subcontractor, at least where such transmission would be prohibited by data protection legislation (or by the conditions of data transfer agreements put in place to impose restrictions on data protection); Processing managers can only use subcontractors who can provide sufficient safeguards to take appropriate technical and organizational measures to ensure that their treatment meets the requirements of the RGPD and protects the rights of those concerned. Contracting Services and/or Procurement Contracting Services (PACS) are responsible for the development and verification of agreements between the University of Arizona and external parties. All parties strive to ensure accountability, appropriate internal consultation, compliance with relevant rules, higher education legislation and policies, and the protection of higher education interests and resources.