What matters
Fines for data processors, rather than data controllers, have been few and far between. But this is likely to change.
What matters next
Consideration of processor location, contract terms and size will be increasingly important to manage controller risk when procuring data processing services.
Previous European data protection