Still losing the race with technology? Understanding the scope of data controllers’ responsibility to implement data protection by design and by default

Figures & data

Figure 1. Diffusion of requirements (of Article 25 GDPR) from the controller towards other actors involved in the data value chain.

Figure 2. Modulation of due-diligence requirements of companies towards different actors in their supply chains.