The processor shall carry out the processing according to the i...

The processor shall carry out the processing according to the instructions provided by the controller, which shall verify the obedience of the own instructions and of the rules governing the subject.

ISO 27701

7.3.7: PII controllers' obligations to inform third parties

8.2.2: Organization’s purposes

8.2.3: Marketing and advertising use

8.5.7: Engagement of a subcontractor to process PII

8.5.8: Change of subcontractor to process PII

7.2.6: Contracts with PII processors

8.2.1: Customer agreement

8.2.5: Customer obligations

8.2.6: Records related to processing PII

8.5.6: Disclosure of subcontractors used to process PII