Partner organisations can be responsible for individual areas of the project. If, for example, it is decided to exchange data via a cloud platform, the partner organisation that provides the platform is responsible for its data protection-compliant operation. It ensures that sufficient technical and organisational measures have been implemented and that the use of the platform complies with data protection law. 

When using external service providers, this also includes the conclusion of an order data processing contract and, if necessary, a risk assessment (see course "Basics course > My rights, my dutys"). 

Task

Create a list of service providers and online services that you use as part of your project. Who in your organisation is responsible for the administration of the services? Who is responsible for managing the contracts? Clarify whether an DPA contract is required for the individual service providers and whether this already exists.