GDPR-ISO27k mapping

Process that Processor Shared Personal Data only in accordance with Annex 1 and in accordance with the PCN Controller’s written instructions (including with respect to transfers of Personal Data to a Third Country or International Organisation), unless the PCN Processor is required to do otherwise by Law (and if so required by Law the PCN Processor shall promptly notify the PCN Controller ... ................
................