Awdurdod annibynnol y Deyrnas Unedig a sefydlwyd i gynnal hawliau gwybodaeth er budd y cyhoedd, annog cyrff cyhoeddus i fod yn agored a hybu preifatrwydd data i unigolion.

Third-party products and services

Your organisation considers ‘data protection by design’ when selecting services and products to use in data processing activities.

Ways to meet our expectations:

  • When you use third-party products or services to process personal data, you make sure to choose suppliers that design their products or services with data protection in mind.

Can you answer yes to the following questions?

  • Do staff consider suppliers’ approach to data protection when using third-party products or services to process personal data?
  • Is there a clear way for them to do this?