When integrating a third-party CRM with an internal HR system, what GDPR obligation must be fulfilled before transferring employee personal data to the CRM vendor?
-
A
Sign an NDA with the CRM vendor
-
B
Execute a Data Processing Agreement (DPA) with the CRM vendor
-
C
Obtain explicit consent from all employees
-
D
Notify the supervisory authority of the integration