3 ms·

Are you held liable by using them if they "lied" to you about being compliant?

• randunel 3y ago
  The beauty of GDPR is that it clearly distinguishes between a "data processor" and a "data controller". Services such as cloud computing providers, including databases used to store data, are merely data processors. You, the contracting party, would be the data controller, held liable for anything that happens with the data. On the other hand, you have a business relationship with your services provider, and you're free to hold them accountable to any claims in the contract. In my experience, however, any liability is capped to some meager amount in the default ToS. To answer your question, you need to clarify what you'd be liable for. When you're the data controller, the answer to your question is almost always yes.