What are the points that a data sharing agreement should raise? 8. The data protection impact assessment and prior consultation processor shall provide the undertaking with appropriate assistance for all data protection impact assessments and prior consultations with supervisory or other competent data protection authorities that the undertaking deems reasonably necessary in accordance with Articles 35 or 36 of the GDPR or equivalent provisions of another Data Protection Act. in any case, only with regard to the processing of the company`s personal data by and taking into account the nature of the processing and the information available to the subcontractors. Any data protection declaration should clearly indicate to data subjects who are jointly responsible and who is responsible for what. For example, when a combined service is provided, data subjects need to know which organization they are going to to request access to topics. . . .