The DPA for Berlin, as well as the DPAs for Niedersachsen, Rheinland-Pfalz, Sachsen, Sachsen-Anhalt and Bayern (LDA) b, are starting a coordinated inspection on the contracts between several web hosters and their customers.
To encourage data controllers to conduct their own checks, the DPA is publishing the following material:
- Checklist – https://www.datenschutz-berlin.de/fileadmin/user_upload/pdf/themen-a-z/a/2022-BlnBDI-Checkliste_Pruefung_AVV_v1.0.pdf
- Guidance on filling out the checklist – https://www.datenschutz-berlin.de/fileadmin/user_upload/pdf/themen-a-z/a/2022-BlnBDI-Checkliste_Pruefung_AVV_v1.0_Ausfuellhinweise.pdf
Article with comments: https://www.cr-online.de/blog/2022/07/19/aufsichtsbehoerden-veroeffentlichen-checkliste-zur-pruefung-von-auftragsverarbeitungsvertraegen/