Almost every organisation relies on third-party suppliers, and many of these are likely to have access to personal data. This procedure provides helpful guidance on how to evaluate, select, manage, and monitor the data processing activities undertaken by third parties.