{"id":7390,"date":"2023-05-23T15:36:04","date_gmt":"2023-05-23T15:36:04","guid":{"rendered":"https:\/\/viqtor.eu\/?p=7390"},"modified":"2026-06-04T15:07:34","modified_gmt":"2026-06-04T15:07:34","slug":"comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications","status":"publish","type":"post","link":"https:\/\/viqtor.eu\/lt\/subrangovo-vaidmens-supratimas-pagal-bdar-atsakomybe-ir-pasekmes\/","title":{"rendered":"Subrangovo vaidmens supratimas pagal BDAR: atsakomyb\u0117 ir pasekm\u0117s"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"7390\" class=\"elementor elementor-7390\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2d75f86 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2d75f86\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6e589fb ot-flex-column-vertical elementor-invisible\" data-id=\"6e589fb\" data-element_type=\"column\" data-settings=\"{&quot;animation&quot;:&quot;fadeInLeft&quot;,&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a030734 elementor-widget elementor-widget-heading\" data-id=\"a030734\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">BDAR subrangovas: kod\u0117l paslaug\u0173 teik\u0117j\u0173 vertinimas tapo gyvybi\u0161kai svarbiu j\u016bs\u0173 verslo klausimu<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7345c5d5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7345c5d5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-11f89eef ot-flex-column-vertical\" data-id=\"11f89eef\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6dd20d9a elementor-widget elementor-widget-text-editor\" data-id=\"6dd20d9a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Duomen\u0173 tvarkymo perdavimas paslaug\u0173 teik\u0117jui niekada neatleid\u017eia \u012fmon\u0117s nuo atsakomyb\u0117s. Nuo 2021 m. <strong>CNIL<\/strong> sugrie\u017etino sankcijas organizacijoms, kurios tinkamai ne\u012fvertino ar nereguliavo savo veiklos. <strong>BDAR subrangovas<\/strong> 1 mln. eur\u0173 prie\u0161 \u201eMobius Solutions\u201c 2025 m. gruod\u017eio m\u0117n., 1,5 mln. eur\u0173 prie\u0161 \u201eDedalus Biologie\u201c, 600 000 eur\u0173 prie\u0161 \u201eCanal+ Group\u201c, 800 000 eur\u0173 prie\u0161 \u201eDiscord\u201c. \u017dinia ai\u0161ki: perduoti duomen\u0173 tvarkym\u0105 i\u0161or\u0117s rangovams. <strong>asmens duomenys<\/strong> nedeleguoja atitikties.<\/p>\n<p>Vadovams problema persik\u0117l\u0117 i\u0161 teisini\u0173 klausim\u0173 \u012f rizikos valdym\u0105. Paslaug\u0173 teik\u0117j\u0173 vertinimas, \u012fforminimas <strong>BDAR subrangos sutartis<\/strong>Grandin\u0117s steb\u0117jimas laikui b\u0117gant: tai teisiniai \u012fsipareigojimai, kuri\u0173 nesilaikymas yra brangus.<\/p>\n<div class=\"wp-block-buttons\">\n<p><!-- \/wp:button --><\/p>\n<\/div>\n<p><!-- \/wp:buttons --><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c0438e5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c0438e5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dfc22bf ot-flex-column-vertical\" data-id=\"dfc22bf\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-534ff69 elementor-widget elementor-widget-text-editor\" data-id=\"534ff69\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>BDAR subrangovo vaidmens ir jo \u012fsipareigojim\u0173 supratimas<\/h2><h3>Kas yra subrangovas pagal BDAR?<\/h3><p>BDAR apibr\u0117\u017eia duomen\u0173 tvarkytoj\u0105 kaip bet kur\u012f fizin\u012f arba juridin\u012f asmen\u012f, kuris tvarko<strong> asmens duomenys<\/strong> vardu <strong>duomen\u0173 valdytojas<\/strong>Kai tik paslaug\u0173 teik\u0117jas pasiekia, talpina, analizuoja arba saugo <strong>asmens duomenys<\/strong> kuriuos jam patikite, jis yra subrangovas: debesijos prieglobos paslaug\u0173 teik\u0117jai, SaaS leid\u0117jai, darbo u\u017emokes\u010dio paslaug\u0173 teik\u0117jai, rinkodaros agent\u016bros, skambu\u010di\u0173 centrai, CRM, el. pa\u0161to paslaug\u0173 teik\u0117jai, IT prie\u017ei\u016bros \u012fmon\u0117s.<\/p><p>Siena su statusu <strong>duomen\u0173 valdytojas<\/strong> ne visada akivaizdu. Paslaug\u0173 teik\u0117jas, kuris nusprend\u017eia d\u0117l duomen\u0173 tvarkymo tikslo ar priemoni\u0173, patenka \u012f auk\u0161tesn\u0119 kategorij\u0105 ir tada prisiima vis\u0105 atsakomyb\u0119. B\u016btent \u012f tokius sp\u0105stus pateko \u201eMobius Solutions Ltd\u201c, kuriai skirta milijono eur\u0173 bauda. <strong>CNIL<\/strong> 2025 m. gruod\u017eio m\u0117n. u\u017e \u201eDeezer\u201c duomen\u0173 pakartotin\u012f panaudojim\u0105 savo paslaugoms tobulinti be joki\u0173 kliento nurodym\u0173.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3c3d265 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3c3d265\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5c17e22 ot-flex-column-vertical\" data-id=\"5c17e22\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-23c7797 elementor-widget elementor-widget-text-editor\" data-id=\"23c7797\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h3>Subrangovo \u012fsipareigojimai, kaip nurodyta 28 straipsnyje<\/h3><p>BDAR 28 straipsnyje konkre\u010diai i\u0161vardyti <strong>subrangovo \u012fsipareigojimai<\/strong> veikti tik pagal dokumentuotas instrukcijas, u\u017etikrinti \u012fgaliot\u0173 darbuotoj\u0173 konfidencialum\u0105, \u012fgyvendinti tinkamas technines ir organizacines saugumo priemones, pad\u0117ti <strong>duomen\u0173 valdytojas<\/strong> tvarkant asmen\u0173 teises ir prane\u0161ant apie pa\u017eeidimus, i\u0161trinant arba gr\u0105\u017einant duomenis pasibaigus paslaugos teikimui ir palaikant <strong>tvarkymo veiklos registras<\/strong> b\u016bdingas jo veiklai.<\/p><p>Pastaroji prievol\u0117 da\u017enai pamir\u0161tama. Ta\u010diau CNIL (Pranc\u016bzijos duomen\u0173 apsaugos tarnyba) j\u0105 nurod\u0117 keliose neseniai taikytose sankcijose, \u012fskaitant \u201eMobius Solutions\u201c byl\u0105. Nevedant registro, prarandamas pagrindinis atitikties \u012frodymas audito atveju.<\/p><h3>Pakopinis subrangos sudarymas: i\u0161ankstinis leidimas b\u016btinas<\/h3><p>Subrangovas gali pasitelkti v\u0117lesn\u012f subrangov\u0105 (\u201ekaskadinis\u201c) tik gav\u0119s i\u0161ankstin\u012f ra\u0161ti\u0161k\u0105 subrangovo leidim\u0105, konkret\u0173 arba bendr\u0105 <strong>duomen\u0173 valdytojas<\/strong>Bendrojo leidimo atveju paslaug\u0173 teik\u0117jas privalo informuoti klient\u0105 apie bet kokius pakeitimus, kad \u0161is gal\u0117t\u0173 jiems prie\u0161tarauti. SaaS paslaug\u0173 teik\u0117jas, kuris naudojasi debesijos prieglobos paslaug\u0173 teik\u0117ju, kuris pats naudojasi steb\u0117jimo subtiek\u0117jo paslaugomis, privalo tur\u0117ti galimyb\u0119 dokumentuoti kiekvien\u0105 grandin\u0117s grand\u012f.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-35fead0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"35fead0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-982987c ot-flex-column-vertical\" data-id=\"982987c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3268fed elementor-widget elementor-widget-text-editor\" data-id=\"3268fed\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Pareiga \u012fvertinti subrangovus: pernelyg da\u017enai pamir\u0161tama pareiga<\/h2><h3>Ai\u0161kus ir strukt\u016brinis BDAR \u012fpareigojimas<\/h3><p>BDAR 28 straipsnio 1 dalis yra nedviprasmi\u0161ka: <strong>duomen\u0173 valdytojas<\/strong> \u201eNaudojasi tik tais subrangovais, kurie suteikia pakankamas garantijas.\u201c Tai ne rekomendacija, o teigiamas \u012fsipareigojimas. Prie\u0161 sudarydamas sutart\u012f, vadovas privalo \u012fsitikinti, kad jo paslaug\u0173 teik\u0117jas turi \u012fg\u016bd\u017ei\u0173, proced\u016br\u0173 ir organizacij\u0105 tvarkyti duomenis pagal reglament\u0105.<\/p><p>Tai rei\u0161kia formalizuot\u0105 vertinimo proced\u016br\u0105: kriterij\u0173 lentel\u0119, atitikties klausimyn\u0105, patvirtinam\u0173j\u0173 dokument\u0173 (saugumo politikos, sertifikat\u0173, <strong>DPA<\/strong>, registras, paskyrimas <strong>Duomen\u0173 apsaugos pareig\u016bnas<\/strong>), v\u0117lesni\u0173 subrangov\u0173 analiz\u0117, serverio vietos ir bet kokio galimo <strong>duomen\u0173 perdavimas<\/strong> u\u017e ES rib\u0173. \u0160is vertinimas turi b\u016bti stebimas ir saugomas \u2013 be jo vadovas negal\u0117s \u012frodyti nei savo kruop\u0161tumo, nei atskaitomyb\u0117s principo laikymosi.<\/p><h3>CNIL sankcijos, kurios tur\u0117t\u0173 \u012fsp\u0117ti vadovus<\/h3><p>2024 m. <strong>CNIL<\/strong> Ji skyr\u0117 87 sankcijas, kuri\u0173 bendra suma vir\u0161ija 55 mln. eur\u0173. Keletas pastar\u0173j\u0173 atvej\u0173 rodo, kad paslaug\u0173 teik\u0117j\u0173 vertinimas ir reguliavimas tapo pagrindine kontrol\u0117s sritimi.<\/p><p>\u201eDedalus Biologie\u201c byla (2022 m. baland\u017eio m\u0117n., 1,5 mln. eur\u0173) teb\u0117ra simbolin\u0117. <strong>CNIL<\/strong> Pranc\u016bzijos konkurencijos tarnyba skyr\u0117 sankcijas \u0161iam medicinos laboratorij\u0173 programin\u0117s \u012frangos leid\u0117jui po didelio masto duomen\u0173 saugumo pa\u017eeidimo, susijusio su sveikatos informacija. Be saugumo spragos, pagrindin\u0117 nurodyta prie\u017eastis buvo privalom\u0173 28 straipsnio nuostat\u0173 nebuvimas standartin\u0117se sutartyse. \u0160is sprendimas \u017eym\u0117jo l\u016b\u017eio ta\u0161k\u0105: subrangovas dabar gali b\u016bti tiesiogiai nubaustas u\u017e tai, kad tinkamai ne\u012fformino santyki\u0173, neatsi\u017evelgiant \u012f kliento atsakomyb\u0119.<\/p><p>\u201eMobius Solutions Ltd\u201c \/ \u201eDeezer\u201c byla (2025 m. gruod\u017eio m\u0117n., 1 mln. eur\u0173) iliustruoja da\u017eniausiai pasitaikan\u010dius tr\u016bkumus: duomen\u0173 saugojim\u0105 pasibaigus sutar\u010diai, tvarkym\u0105 ne pagal kliento nurodymus, registro tr\u016bkum\u0105, saugumo priemoni\u0173 tr\u016bkum\u0105, d\u0117l kurio keli\u0173 milijon\u0173 vartotoj\u0173 duomenys buvo paskelbti tamsiajame internete.<\/p><p>\u201eDiscord\u201c byla (2022 m., 800 000 EUR) lemia sankcijas i\u0161 \u0161alies pus\u0117s. <strong>duomen\u0173 valdytojas<\/strong> sutarties, atitinkan\u010dios 28 straipsn\u012f, nebuvimas. \u201eCanal+ Group\u201c, kuriai 2022 m. buvo skirta 600 000 EUR bauda, buvo nubausta vis\u0173 pirma u\u017e pakankam\u0173 sutartini\u0173 susitarim\u0173 tr\u016bkum\u0105. Nuo 2021 m. sausio 27 d. <strong>CNIL<\/strong> prad\u0117jo savo doktrin\u0105 tuo pa\u010diu metu sankcionuodamas<strong> duomen\u0173 valdytojas<\/strong> (150 000 EUR) ir jos subrangovui (75 000 EUR) u\u017e tai, kad jie nesi\u0117m\u0117 priemoni\u0173 prie\u0161 \u012fgaliojim\u0173 klastojim\u0105.<\/p><h3>K\u0105 CNIL nagrin\u0117ja savo audit\u0173 metu<\/h3><p>Priimant sprendimus, valdymo tinklelis <strong>CNIL<\/strong> I\u0161sami informacija tapo ai\u0161kesn\u0117. Institucija tikrina, ar egzistuoja <strong>BDAR subrangos sutartis<\/strong> ra\u0161ytin\u0119 ir 28 straipsn\u012f atitinkan\u010di\u0105 instrukcij\u0173 dokumentacij\u0105, atnaujint\u0105 v\u0117lesni\u0173 subrangov\u0173 s\u0105ra\u0161\u0105, fakti\u0161kai \u012fgyvendintas technines ir organizacines priemones, prane\u0161imo proced\u016bras, susijusias su <strong>duomen\u0173 pa\u017eeidimas<\/strong>, asmen\u0173 teisi\u0173 gynimo tvark\u0105, sutarties nutraukimo s\u0105lygas ir atlikt\u0173 audit\u0173 atsekamum\u0105.<\/p><p>Kad paruo\u0161tume j\u016bs\u0173 organizacij\u0105 \u0161iems kontroliniams punktams, m\u016bs\u0173<strong> <a href=\"https:\/\/viqtor.eu\/lt\/bdar-atitikties-audito-vadovas\/\">I\u0161samus BDAR atitikties audit\u0173 vadovas<\/a><\/strong> i\u0161samiai apra\u0161oma taikytina metodika.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8df8fc9 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8df8fc9\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7ad4ee2 ot-flex-column-vertical\" data-id=\"7ad4ee2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b662209 elementor-widget elementor-widget-text-editor\" data-id=\"b662209\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Ar norite u\u017etikrinti savo subrangos grandin\u0117s saugum\u0105 ir \u012frodyti atitikt\u012f reikalavimams?\u00a0<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c70a66 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"6c70a66\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/lt\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Pasikalb\u0117kite su \u201eViqtor\u00ae\u201c ekspertu<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2012d3e ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2012d3e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-054a67e ot-flex-column-vertical\" data-id=\"054a67e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a36a970 elementor-widget elementor-widget-text-editor\" data-id=\"a36a970\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Tvirto sutar\u010di\u0173 pagrindo k\u016brimas: BDAR subrangos sutartis<\/h2><div><h3>28 straipsnio 3 dalies privalomosios nuostatos<\/h3><p><strong>DPA (Duomen\u0173 tvarkymo sutartis)<\/strong>Arba <strong>BDAR subrangos sutartis<\/strong>turi apimti pagrindin\u012f reglamente numatyt\u0173 s\u0105lyg\u0173 rinkin\u012f: tvarkymo dalyk\u0105 ir trukm\u0119, pob\u016bd\u012f ir tiksl\u0105, duomen\u0173 r\u016b\u0161\u012f ir asmen\u0173 kategorijas, duomen\u0173 tvarkytojo pareigas ir teises. <strong>duomen\u0173 valdytojas<\/strong>Taip pat turi b\u016bti numatyti a\u0161tuoni konkret\u016bs subrangovo \u012fsipareigojimai: veikti pagal dokumentuotas instrukcijas, garantuoti konfidencialum\u0105, imtis reikiam\u0173 saugumo priemoni\u0173, bendradarbiauti su v\u0117lesniais subrangovais tik gavus leidim\u0105, pad\u0117ti atsakyti \u012f asmen\u0173 pra\u0161ymus, pad\u0117ti saugumo ir prane\u0161im\u0173 klausimais, gr\u0105\u017einti arba i\u0161trinti duomenis pasibaigus sutar\u010diai ir pateikti vis\u0105 informacij\u0105, reikaling\u0105 auditams.<\/p><p>Leid\u0117jo standartin\u0117s s\u0105lygos paprastai yra nepakankamos, pavyzd\u017eiui, <strong>CNIL<\/strong> \u201eDedalus\u201c ir keli kiti paslaug\u0173 teik\u0117jai, kuriems v\u0117liau buvo skirtos sankcijos, buvo u\u017e tai kritikuojami. B\u016btina atlikti kiekvienos sutarties per\u017ei\u016br\u0105.<\/p><h3>Sp\u0105stai, kuri\u0173 reikia vengti ra\u0161ant<\/h3><p>Atitikt\u012f reikalavimams nuolat kenkia kelios klaidos. S\u0105lyga, visi\u0161kai atleid\u017eianti subrangov\u0105 nuo atsakomyb\u0117s, negali b\u016bti taikoma subrangovui. <strong>CNIL<\/strong> kaip ir nuot\u0117kio aukai. Tr\u016bkstamas arba pasen\u0119s v\u0117lesni\u0173 subrangov\u0173 s\u0105ra\u0161as atskleid\u017eia <strong>duomen\u0173 valdytojas<\/strong> iki nes\u0117km\u0117s. Miglotai apra\u0161ytos saugumo priemon\u0117s yra nepakankamos: <strong>CNIL<\/strong> laukia konkretaus, patikrinamo ir datuoto informacinio dokumento. Pa\u017eeidim\u0173 prane\u0161imo proced\u016bros nebuvimas arba terminai, nesuderinami su 72 valand\u0173 laikotarpiu, nustatytu <strong>duomen\u0173 valdytojas<\/strong>, yra sistemingai i\u0161laikomas i\u0161 \u012fsipareigojim\u0173 nevykdan\u010di\u0173 subrangov\u0173.<\/p><h3>Pagrindinis duomen\u0173 apsaugos pareig\u016bno vaidmuo ir duomen\u0173 valdymas<\/h3><p>THE <strong>Duomen\u0173 apsaugos pareig\u016bnas<\/strong> Duomen\u0173 apsaugos pareig\u016bnas (DAP) atlieka esmin\u012f vaidmen\u012f: jis vadovauja paslaug\u0173 teik\u0117j\u0173 vertinimui, tvirtina sutar\u010di\u0173 s\u0105lygas, pri\u017ei\u016bri subrangov\u0173 registr\u0105 ir \u012fsp\u0117ja vadovyb\u0119 apie rizik\u0105. Jei jo n\u0117ra <strong>Duomen\u0173 apsaugos pareig\u016bnas<\/strong>\u0160ias misijas turi atlikti ai\u0161kiai apibr\u0117\u017eta funkcija. <a href=\"https:\/\/viqtor.eu\/lt\/duomenu-valdymas\/\">duomen\u0173 valdymas<\/a> daugiausia priklauso nuo \u0161io geb\u0117jimo palaikyti santykius su subrangovais ilg\u0105 laik\u0105.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-521622a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"521622a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bb9c409 ot-flex-column-vertical\" data-id=\"bb9c409\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7430289 elementor-widget elementor-widget-text-editor\" data-id=\"7430289\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Santyki\u0173 valdymas laikui b\u0117gant: auditai, steb\u0117sena ir incidentai<\/h2><h3>Nuolatinis \u012fsipareigojimas, o ne pasira\u0161ymo formalumas<\/h3><p>Nepakanka to \u012ftraukti \u012f sutart\u012f. <strong>duomen\u0173 valdytojas<\/strong> laikui b\u0117gant turi u\u017etikrinti, kad jo paslaug\u0173 teik\u0117jas laikyt\u0173si savo \u012fsipareigojim\u0173: periodiniai auditai, metin\u0117 veiklos rezultat\u0173 per\u017ei\u016bra <strong>DPA<\/strong>sistemingas atnaujinimas pasikeitus (naujas v\u0117lesnis subrangovas, nauja taikymo sritis, nauja serverio vieta).<\/p><p>Ten <strong>CNIL<\/strong> yra ai\u0161kus: subrangovo naudojimas niekada neatleid\u017eia nuo atsakomyb\u0117s <strong>duomen\u0173 valdytojas<\/strong> savo r\u016bpestingumo pareigos. \u201eCanal+\u201c sankcija buvo pagr\u012fsta b\u016btent tuo, kad nebuvo \u012fgyvendinta veiksminga paslaug\u0173 teik\u0117j\u0173 prie\u017ei\u016bra. Ir atvirk\u0161\u010diai, \u012fmon\u0117, galinti pateikti audito ataskaitas, u\u017epildyti klausimynus ir veiksm\u0173 planus, demonstruoja savo r\u016bpestingum\u0105 net ir incidento atveju.<\/p><p>THE <a href=\"https:\/\/viqtor.eu\/lt\/subrangovu-modulis\/\">\u201eViqtor\u201c subrangov\u0173 modulis<\/a> centralizuoja vertinim\u0105, sutart\u012f, v\u0117lesnius subrangovus, auditus ir main\u0173 istorij\u0105 vienoje saugykloje.<\/p><h3>Reagavimas \u012f duomen\u0173 saugumo pa\u017eeidim\u0105, susijus\u012f su paslaug\u0173 teik\u0117ju<\/h3><p>Didel\u0117 dalis pa\u017eeidim\u0173, apie kuriuos kasmet prane\u0161ama <strong>CNIL<\/strong> apima subrangov\u0105. <strong>duomen\u0173 valdytojas<\/strong> Tod\u0117l nuo pat prad\u017ei\u0173 sutartyje turi b\u016bti numatyta greitojo persp\u0117jimo sistema. Subrangovas privalo informuoti savo klient\u0105 \u201ekuo grei\u010diau\u201c, o tai prakti\u0161kai rei\u0161kia per 24\u201348 valandas, kad prane\u0161imas b\u016bt\u0173 pateiktas per \u012fstatymin\u012f 72 valand\u0173 laikotarp\u012f. <strong>CNIL<\/strong>M\u016bs\u0173 puslapis, skirtas <a href=\"https:\/\/viqtor.eu\/lt\/duomenu-pazeidimo-deklaracija\/\">duomen\u0173 pa\u017eeidimo parei\u0161kimas<\/a> Jis i\u0161samiai apra\u0161o \u017eingsnius.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-63cc543 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"63cc543\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3da0d90 ot-flex-column-vertical\" data-id=\"3da0d90\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e38d357 elementor-widget elementor-widget-text-editor\" data-id=\"e38d357\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>\u012e k\u0105 reikia atkreipti d\u0117mes\u012f<\/h2><ul><li>Bet kuris paslaug\u0173 teik\u0117jas, kuris dirba su <strong>asmens duomenys<\/strong> j\u016bs\u0173 paskyrai yra <strong>BDAR subrangovas<\/strong>, ir \u012ftraukia tiek j\u016bs\u0173, tiek jo atsakomyb\u0119.<\/li><li>I\u0161ankstinis subrangovo vertinimas yra ai\u0161ki prievol\u0117 pagal BDAR 28 straipsnio 1 dal\u012f, o ne gera praktika.<\/li><li>THE <strong>BDAR subrangos sutartis (DPA)<\/strong> turi apimti visas privalomas 28 straipsnio nuostatas; standartini\u0173 bendr\u0173j\u0173 s\u0105lyg\u0173 beveik niekada nepakanka.<\/li><li>Sankcijos <strong>CNIL<\/strong> Naujausi atvejai (\u201eMobius\u201c \u2013 1 mln. EUR, \u201eDedalus\u201c \u2013 1,5 mln. EUR, \u201eCanal+\u201c \u2013 600 t\u016bkst. EUR, \u201eDiscord\u201c \u2013 800 t\u016bkst. EUR) rodo, kad institucija skiria sankcijas tiek nevykdantiems paslaug\u0173 teik\u0117jams, tiek aplaidiems klientams.<\/li><li>Atitiktis reikalavimams \u012frodoma dokumentais: registrais, auditais, ataskaitomis, veiksm\u0173 planais.<\/li><li>Subrangos santykiai valdomi laikui b\u0117gant, o ne tik pasira\u0161ymo metu.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-dd968ee ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"dd968ee\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ea6c022 ot-flex-column-vertical\" data-id=\"ea6c022\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7ca729a elementor-widget elementor-widget-heading\" data-id=\"7ca729a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">DUK \u2013 BDAR subrangovas<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6d41154 elementor-widget elementor-widget-toggle\" data-id=\"6d41154\" data-element_type=\"widget\" data-widget_type=\"toggle.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-toggle\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1141\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-1141\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kokie yra subrangovo \u012fsipareigojimai pagal BDAR?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1141\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-1141\"><p>Subrangovas privalo veikti tik pagal dokumentuotus nurodymus, gautus i\u0161 subrangovo. <strong>duomen\u0173 valdytojas<\/strong>, garantuoti konfidencialum\u0105, \u012fgyvendinti tinkamas saugumo priemones, registruoti savo veikl\u0105, pad\u0117ti klientui valdyti teises ir pa\u017eeidimus, pasitelkti v\u0117lesnius subrangovus tik su ra\u0161ti\u0161ku leidimu ir pasibaigus sutar\u010diai gr\u0105\u017einti arba i\u0161trinti duomenis.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1142\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-1142\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Ar subrangovas gali pasitelkti kit\u0105 subrangov\u0105 (pakopin\u0117 subrangos sutartis)?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1142\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-1142\"><p>Taip, gavus i\u0161ankstin\u012f ra\u0161ti\u0161k\u0105 leidim\u0105 i\u0161 <strong>duomen\u0173 valdytojas<\/strong>Konkretus arba bendrasis \u012fgaliojimas. Bendrojo \u012fgaliojimo atveju subrangovas privalo informuoti savo klient\u0105 apie bet kokius pakeitimus, kad klientas gal\u0117t\u0173 pateikti prie\u0161taravim\u0105. Pradinis subrangovas i\u0161lieka visi\u0161kai atsakingas u\u017e v\u0117lesnio subrangovo \u012fsipareigojim\u0173 vykdym\u0105 ir privalo jam nustatyti tuos pa\u010dius sutartinius \u012fsipareigojimus.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1143\" class=\"elementor-tab-title\" data-tab=\"3\" role=\"button\" aria-controls=\"elementor-tab-content-1143\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kokios baudos gali b\u016bti taikomos subrangovui u\u017e BDAR nesilaikym\u0105?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1143\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"region\" aria-labelledby=\"elementor-tab-title-1143\"><p>Subrangovui gali b\u016bti taikomos sankcijos <strong>CNIL<\/strong> iki 10 mln. EUR arba 2 140 000 jos metin\u0117s pasaulin\u0117s apyvartos, atsi\u017evelgiant \u012f tai, kuri suma didesn\u0117. Naujausi pavyzd\u017eiai \u2013 \u201eMobius Solutions Ltd\u201c (1 mln. EUR 2025 m. gruod\u017eio m\u0117n.) ir \u201eDedalus Biologie\u201c (1,5 mln. EUR 2022 m. baland\u017eio m\u0117n.). Subrangovas taip pat gali b\u016bti laikomas atsakingu atitinkamiems asmenims pagal 82 straipsn\u012f.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1144\" class=\"elementor-tab-title\" data-tab=\"4\" role=\"button\" aria-controls=\"elementor-tab-content-1144\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kokios s\u0105lygos tur\u0117t\u0173 b\u016bti \u012ftrauktos \u012f BDAR subrangos sutart\u012f?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1144\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"region\" aria-labelledby=\"elementor-tab-title-1144\"><p>THE <strong>DPA<\/strong> Jame turi b\u016bti apra\u0161ytas tvarkymo objektas, trukm\u0117, pob\u016bdis ir tikslas, duomen\u0173 ir asmen\u0173 kategorijos, taip pat \u012ftraukti a\u0161tuoni 28(3) straipsnio \u012fsipareigojimai: dokumentuoti nurodymai, konfidencialumas, saugumas, v\u0117lesni\u0173 subtvarkytoj\u0173 prie\u017ei\u016bra, pagalba u\u017etikrinant asmen\u0173 teises, pagalba teikiant prane\u0161imus, gr\u0105\u017einant ar sunaikinant duomenis pasibaigus sutar\u010diai ir informacijos teikimas auditui. Turi b\u016bti prid\u0117tas v\u0117lesni\u0173 subtvarkytoj\u0173 s\u0105ra\u0161as.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1145\" class=\"elementor-tab-title\" data-tab=\"5\" role=\"button\" aria-controls=\"elementor-tab-content-1145\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kaip MV\u012e i\u0161sirinkti BDAR reikalavimus atitinkant\u012f subrangov\u0105?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1145\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"region\" aria-labelledby=\"elementor-tab-title-1145\"><p>Vertinimas grind\u017eiamas keliais pagrindiniais kriterijais: egzistavimu <strong>DPA<\/strong> atitiktis, buvimas <strong>Duomen\u0173 apsaugos pareig\u016bnas<\/strong>Duomen\u0173 vieta (pageidautina ES), saugumo sertifikatai (ISO 27001, HDS sveikatos prie\u017ei\u016brai), atnaujintas v\u0117lesni\u0173 subrangov\u0173 s\u0105ra\u0161as, rekomendacijos ir incident\u0173 istorija. U\u017epildyta ir i\u0161saugota oficiali atitikties anketa yra j\u016bs\u0173 deramo kruop\u0161tumo \u012frodymas audito atveju.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1146\" class=\"elementor-tab-title\" data-tab=\"6\" role=\"button\" aria-controls=\"elementor-tab-content-1146\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kokios yra debesijos prieglobos paslaug\u0173 teik\u0117jo, kaip BDAR subrangovo, pareigos?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1146\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"6\" role=\"region\" aria-labelledby=\"elementor-tab-title-1146\"><p>Debes\u0173 kompiuterijos prieglobos paslaug\u0173 teik\u0117jas, kuris talpina <strong>asmens duomenys<\/strong> Klientui tai yra subrangovas. Subrangovas privalo u\u017etikrinti saugum\u0105 (\u0161ifravim\u0105, prieigos kontrol\u0119, atsargines kopijas), informuoti klient\u0105 apie pa\u017eeidim\u0105, pri\u017ei\u016br\u0117ti v\u0117lesnius subrangovus, u\u017etikrinti duomen\u0173 perkeliamum\u0105 ir veiksming\u0105 i\u0161trynim\u0105, taip pat u\u017etikrinti skaidrum\u0105 d\u0117l duomen\u0173 vietos ir perdavimo. Sveikatos duomenims reikalingi special\u016bs sertifikatai, tokie kaip HDS.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles sont les obligations d'un sous-traitant selon le RGPD ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Le sous-traitant doit agir uniquement sur instructions document\\u00e9es du <strong>responsable de traitement<\\\/strong>, garantir la confidentialit\\u00e9, mettre en \\u0153uvre des mesures de s\\u00e9curit\\u00e9 appropri\\u00e9es, tenir un registre de ses activit\\u00e9s, assister son client dans la gestion des droits et des violations, ne recourir \\u00e0 des sous-traitants ult\\u00e9rieurs qu&rsquo;avec autorisation \\u00e9crite, et restituer ou supprimer les donn\\u00e9es en fin de contrat.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Un sous-traitant peut-il faire appel \\u00e0 un autre sous-traitant (sous-traitance en cascade) ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Oui, avec autorisation \\u00e9crite pr\\u00e9alable du <strong>responsable de traitement<\\\/strong>, sp\\u00e9cifique ou g\\u00e9n\\u00e9rale. En cas d&rsquo;autorisation g\\u00e9n\\u00e9rale, le sous-traitant doit informer son client de tout changement pour lui permettre d&rsquo;objecter. Le sous-traitant initial reste pleinement responsable de l&rsquo;ex\\u00e9cution des obligations par le sous-traitant ult\\u00e9rieur, et doit lui imposer les m\\u00eames obligations contractuelles.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles sanctions risque un sous-traitant en cas de non-conformit\\u00e9 au RGPD ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Un sous-traitant peut \\u00eatre sanctionn\\u00e9 par la <strong>CNIL<\\\/strong> jusqu&rsquo;\\u00e0 10 millions d&rsquo;euros ou 2 % de son chiffre d&rsquo;affaires annuel mondial, le montant le plus \\u00e9lev\\u00e9 \\u00e9tant retenu. Mobius Solutions Ltd (1 million en d\\u00e9cembre 2025) et Dedalus Biologie (1,5 million en avril 2022) en sont les illustrations r\\u00e9centes. Le sous-traitant peut \\u00e9galement engager sa responsabilit\\u00e9 civile vis-\\u00e0-vis des personnes concern\\u00e9es au titre de l&rsquo;article 82.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles clauses inclure dans un contrat de sous-traitance RGPD ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Le <strong>DPA<\\\/strong> doit d\\u00e9crire l&rsquo;objet, la dur\\u00e9e, la nature et la finalit\\u00e9 du traitement, les cat\\u00e9gories de donn\\u00e9es et de personnes, et int\\u00e9grer les huit engagements de l&rsquo;article 28 paragraphe 3 : instructions document\\u00e9es, confidentialit\\u00e9, s\\u00e9curit\\u00e9, encadrement des sous-traitants ult\\u00e9rieurs, assistance aux droits des personnes, assistance \\u00e0 la notification, restitution ou destruction des donn\\u00e9es en fin de contrat, mise \\u00e0 disposition des informations pour les audits. La liste des sous-traitants ult\\u00e9rieurs doit \\u00eatre annex\\u00e9e.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Comment choisir un sous-traitant conforme au RGPD pour une PME ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>L&rsquo;\\u00e9valuation repose sur quelques crit\\u00e8res cl\\u00e9s : existence d&rsquo;un <strong>DPA<\\\/strong> conforme, pr\\u00e9sence d&rsquo;un <strong>DPO<\\\/strong>, localisation des donn\\u00e9es (UE de pr\\u00e9f\\u00e9rence), certifications de s\\u00e9curit\\u00e9 (ISO 27001, HDS pour la sant\\u00e9), liste \\u00e0 jour des sous-traitants ult\\u00e9rieurs, r\\u00e9f\\u00e9rences et historique d&rsquo;incidents. Un questionnaire de conformit\\u00e9 formalis\\u00e9, compl\\u00e9t\\u00e9 et conserv\\u00e9, constitue la preuve de votre diligence en cas de contr\\u00f4le.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles sont les responsabilit\\u00e9s d'un h\\u00e9bergeur cloud en tant que sous-traitant RGPD ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Un h\\u00e9bergeur cloud qui h\\u00e9berge des <strong>donn\\u00e9es personnelles<\\\/strong> pour un client est sous-traitant. Il doit assurer la s\\u00e9curit\\u00e9 (chiffrement, contr\\u00f4le d&rsquo;acc\\u00e8s, sauvegardes), informer son client en cas de violation, encadrer ses sous-traitants ult\\u00e9rieurs, permettre la portabilit\\u00e9 et la suppression effective des donn\\u00e9es, et fournir une transparence sur la localisation et les transferts. Pour les donn\\u00e9es de sant\\u00e9, des certifications sp\\u00e9cifiques comme HDS sont requises.<\\\/p>\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-73f6d05 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"73f6d05\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c7a5503 ot-flex-column-vertical\" data-id=\"c7a5503\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-73dd26b elementor-widget elementor-widget-text-editor\" data-id=\"73dd26b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Subrangov\u0173 vertinimas, prie\u017ei\u016bra ir valdymas n\u0117ra ka\u017ekas, k\u0105 galima atlikti improvizuotai.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-72c44c9 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"72c44c9\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/lt\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Susisiekite su Viktoro komanda<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d1af4ea ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d1af4ea\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3846789 ot-flex-column-vertical\" data-id=\"3846789\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8f25732 elementor-widget elementor-widget-text-editor\" data-id=\"8f25732\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Nor\u0117dami su\u017einoti daugiau: visus m\u016bs\u0173 i\u0161teklius apie BDAR atitikt\u012f rasite adresu <a href=\"https:\/\/viqtor.eu\/lt\">Viktoro platforma<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>BDAR subrangovas: kod\u0117l paslaug\u0173 teik\u0117j\u0173 vertinimas tapo gyvybi\u0161kai svarbus j\u016bs\u0173 verslui. Duomen\u0173 tvarkymo patik\u0117jimas paslaug\u0173 teik\u0117jui niekada neatleid\u017eia j\u016bs\u0173 \u012fmon\u0117s nuo atsakomyb\u0117s. Nuo 2021 m. CNIL (Pranc\u016bzijos duomen\u0173 apsaugos tarnyba) padidino sankcijas organizacijoms, kurios tinkamai ne\u012fvertino ar nereguliavo savo BDAR subrangov\u0173: 1 mln. [\u2026]<\/p>","protected":false},"author":1,"featured_media":5169,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[37],"tags":[],"class_list":["post-7390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Sous-traitant RGPD : responsabilit\u00e9s et enjeux<\/title>\n<meta name=\"description\" content=\"Confier ses donn\u00e9es \u00e0 un prestataire n&#039;efface pas vos responsabilit\u00e9s. Pourquoi \u00e9valuer et encadrer votre sous-traitant RGPD est vital. Conseils Viqtor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/viqtor.eu\/lt\/subrangovo-vaidmens-supratimas-pagal-bdar-atsakomybe-ir-pasekmes\/\" \/>\n<meta property=\"og:locale\" content=\"lt_LT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sous-traitant RGPD : responsabilit\u00e9s et enjeux\" \/>\n<meta property=\"og:description\" content=\"Confier ses donn\u00e9es \u00e0 un prestataire n&#039;efface pas vos responsabilit\u00e9s. Pourquoi \u00e9valuer et encadrer votre sous-traitant RGPD est vital. Conseils Viqtor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/viqtor.eu\/lt\/subrangovo-vaidmens-supratimas-pagal-bdar-atsakomybe-ir-pasekmes\/\" \/>\n<meta property=\"og:site_name\" content=\"Viqtor\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-23T15:36:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-04T15:07:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Bruno\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bruno\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minu\u010di\u0173\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/\"},\"author\":{\"name\":\"Bruno\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/3dbd9cc82a28f6cf1695c92eda0099ad\"},\"headline\":\"Comprendre le r\u00f4le du sous-traitant selon le RGPD : Responsabilit\u00e9s et implications\",\"datePublished\":\"2023-05-23T15:36:04+00:00\",\"dateModified\":\"2026-06-04T15:07:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/\"},\"wordCount\":2403,\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"lt-LT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/\",\"url\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/\",\"name\":\"Sous-traitant RGPD : responsabilit\u00e9s et enjeux\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg\",\"datePublished\":\"2023-05-23T15:36:04+00:00\",\"dateModified\":\"2026-06-04T15:07:34+00:00\",\"description\":\"Confier ses donn\u00e9es \u00e0 un prestataire n'efface pas vos responsabilit\u00e9s. Pourquoi \u00e9valuer et encadrer votre sous-traitant RGPD est vital. Conseils Viqtor.\",\"breadcrumb\":{\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#breadcrumb\"},\"inLanguage\":\"lt-LT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"lt-LT\",\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage\",\"url\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg\",\"contentUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg\",\"width\":2560,\"height\":1440,\"caption\":\"sous-traitance RGPD\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/viqtor.eu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Comprendre le r\u00f4le du sous-traitant selon le RGPD : Responsabilit\u00e9s et implications\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/viqtor.eu\/#website\",\"url\":\"https:\/\/viqtor.eu\/\",\"name\":\"Viqtor\",\"description\":\"Faites du RGPD une opportunit\u00e9 pour votre entreprise.\",\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/viqtor.eu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"lt-LT\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/viqtor.eu\/#organization\",\"name\":\"viqtor.eu\",\"url\":\"https:\/\/viqtor.eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"lt-LT\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"viqtor.eu\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/3dbd9cc82a28f6cf1695c92eda0099ad\",\"name\":\"Bruno\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"lt-LT\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e5a596f9489de15bfe046e97fb771f63589b601ca7e81ccc2bb9a23582f441a3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e5a596f9489de15bfe046e97fb771f63589b601ca7e81ccc2bb9a23582f441a3?s=96&d=mm&r=g\",\"caption\":\"Bruno\"},\"sameAs\":[\"https:\/\/exciting-panini.13-37-234-21.plesk.page\"],\"url\":\"https:\/\/viqtor.eu\/lt\/author\/mouad_zxum2ebi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sous-traitant RGPD : responsabilit\u00e9s et enjeux","description":"Confier ses donn\u00e9es \u00e0 un prestataire n'efface pas vos responsabilit\u00e9s. Pourquoi \u00e9valuer et encadrer votre sous-traitant RGPD est vital. Conseils Viqtor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/viqtor.eu\/lt\/subrangovo-vaidmens-supratimas-pagal-bdar-atsakomybe-ir-pasekmes\/","og_locale":"lt_LT","og_type":"article","og_title":"Sous-traitant RGPD : responsabilit\u00e9s et enjeux","og_description":"Confier ses donn\u00e9es \u00e0 un prestataire n'efface pas vos responsabilit\u00e9s. Pourquoi \u00e9valuer et encadrer votre sous-traitant RGPD est vital. Conseils Viqtor.","og_url":"https:\/\/viqtor.eu\/lt\/subrangovo-vaidmens-supratimas-pagal-bdar-atsakomybe-ir-pasekmes\/","og_site_name":"Viqtor","article_published_time":"2023-05-23T15:36:04+00:00","article_modified_time":"2026-06-04T15:07:34+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png","type":"image\/jpeg"}],"author":"Bruno","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Bruno","Est. reading time":"11 minu\u010di\u0173"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#article","isPartOf":{"@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/"},"author":{"name":"Bruno","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/3dbd9cc82a28f6cf1695c92eda0099ad"},"headline":"Comprendre le r\u00f4le du sous-traitant selon le RGPD : Responsabilit\u00e9s et implications","datePublished":"2023-05-23T15:36:04+00:00","dateModified":"2026-06-04T15:07:34+00:00","mainEntityOfPage":{"@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/"},"wordCount":2403,"publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"image":{"@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg","articleSection":["Blog"],"inLanguage":"lt-LT"},{"@type":"WebPage","@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/","url":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/","name":"Sous-traitant RGPD : responsabilit\u00e9s et enjeux","isPartOf":{"@id":"https:\/\/viqtor.eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage"},"image":{"@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg","datePublished":"2023-05-23T15:36:04+00:00","dateModified":"2026-06-04T15:07:34+00:00","description":"Confier ses donn\u00e9es \u00e0 un prestataire n'efface pas vos responsabilit\u00e9s. Pourquoi \u00e9valuer et encadrer votre sous-traitant RGPD est vital. Conseils Viqtor.","breadcrumb":{"@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#breadcrumb"},"inLanguage":"lt-LT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/"]}]},{"@type":"ImageObject","inLanguage":"lt-LT","@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#primaryimage","url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg","contentUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2023\/03\/shutterstock_1682600689-scaled.jpg","width":2560,"height":1440,"caption":"sous-traitance RGPD"},{"@type":"BreadcrumbList","@id":"https:\/\/viqtor.eu\/comprendre-le-role-du-sous-traitant-selon-le-rgpd-responsabilites-et-implications\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/viqtor.eu\/"},{"@type":"ListItem","position":2,"name":"Comprendre le r\u00f4le du sous-traitant selon le RGPD : Responsabilit\u00e9s et implications"}]},{"@type":"WebSite","@id":"https:\/\/viqtor.eu\/#website","url":"https:\/\/viqtor.eu\/","name":"Viqtor","description":"Faites du RGPD une opportunit\u00e9 pour votre entreprise.","publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/viqtor.eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"lt-LT"},{"@type":"Organization","@id":"https:\/\/viqtor.eu\/#organization","name":"viqtor.eu","url":"https:\/\/viqtor.eu\/","logo":{"@type":"ImageObject","inLanguage":"lt-LT","@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"viqtor.eu"},"image":{"@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/3dbd9cc82a28f6cf1695c92eda0099ad","name":"Bruno","image":{"@type":"ImageObject","inLanguage":"lt-LT","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e5a596f9489de15bfe046e97fb771f63589b601ca7e81ccc2bb9a23582f441a3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e5a596f9489de15bfe046e97fb771f63589b601ca7e81ccc2bb9a23582f441a3?s=96&d=mm&r=g","caption":"Bruno"},"sameAs":["https:\/\/exciting-panini.13-37-234-21.plesk.page"],"url":"https:\/\/viqtor.eu\/lt\/author\/mouad_zxum2ebi\/"}]}},"_links":{"self":[{"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/posts\/7390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/comments?post=7390"}],"version-history":[{"count":50,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/posts\/7390\/revisions"}],"predecessor-version":[{"id":14206,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/posts\/7390\/revisions\/14206"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/media\/5169"}],"wp:attachment":[{"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/media?parent=7390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/categories?post=7390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/viqtor.eu\/lt\/wp-json\/wp\/v2\/tags?post=7390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}