GDPR introduces compliance co-responsibility
GDPR introduces a new twist in data protection… co-responsibility of the entire production chain. This means that studios, production companies, and their final clients are co-responsible for each other’s compliance.
Final clients are considered data controllers of the data used in projects entrusted to their subcontractors. A simple mention in a contract is insufficient, they have an obligation of means of compliance confirmation.
Final clients are responsible for verifying they do not receive or store actor personal data outside of contracted and the audio produced within this framework.