Vendor compliance
On behalf of institutions, we perform privacy and security risk analyses on vendors. In this way, we jointly fulfil statutory obligations. By combining expertise, we achieve cost savings, knowledge sharing and, on behalf of the education and research sector, we have a stronger negotiating position towards vendors.
SURF and Privacy Company have conducted a Data Protection Impact Assessment (DPIA) on Adobe Creative Cloud and Document Cloud for Education. SURF confirms that institutions may continue using these…
News
Listen to the SURFshort podcast with privacy lawyer Sophia Gelpke on DPIAs, vendor compliance and privacy law in a geopolitical context.
''We'd love to hear which compliance pathways you think are important''.