This might be useful to read....and maybe steep further understanding that if the GDPR is the framework objective for conformance, then the ePDP carryings-on could be properly classified as mostly 'spinning wheels"....

https://edpb.europa.eu/sites/edpb/files/consultation/edpb_guidelines_202007_controllerprocessor_en.pdf

CAS

==============================
Carlton A Samuels
Mobile: 876-818-1799
Strategy, Process, Governance, Assessment & Turnaround

=============================