{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2021/915 — Decision — Contractual clauses between controllers and processors [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv","title":"ANNEX IV","family":"l2_unit_view","work_id":"spaces/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","view_of":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Implementing Decision (EU) 2021/915, OJ L 199, 7.6.2021","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/dec_impl/2021/915/oj/eng","valid_from":"2021-06-27","valid_until":null,"content_id":"dd892d70dc6a3388","versions":["2021-06-27"],"version_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/versions/2026-10-26/rev/dd892d70dc6a3388","versions_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/versions","relations_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/relations","act_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors#annex-iv","source_line":"Commission Implementing Decision (EU) 2021/915 · binding on its addressees · dated 4 Jun 2021 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_decision","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2021-06-04","entry_into_force":"2021-06-27","locators":{"document_date":"CELLAR 32021D0915 work_date_document","entry_into_force":"CELLAR 32021D0915 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","path":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","name":"Commission Implementing Decision (EU) 2021/915","number":"2021/915","celex":"32021D0915","title_official":"COMMISSION IMPLEMENTING DECISION (EU) 2021/915 of 4 June 2021 on standard contractual clauses between controllers and processors under Article 28(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 29(7) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (Text with EEA relevance)","document_date":"2021-06-04"},"position":{"kind":"annex","key":"annex-iv","index":5,"articles":4,"annexes":5},"prev":{"path":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iii","key":"annex-iii","title":"ANNEX III"},"next":null,"act_anchor":"#annex-iv"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/dec_impl/2021/915/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors.md","unit_text_sha256":"a61c777086f7030a1074658ffab4908af3be66b4fc5f7d2af816731a1a702009","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annex-iv","kind":"annex","key":"annex-iv","heading":"ANNEX IV","text":"## ANNEX IV\n\n<a id=\"annex-iv\"></a>List of sub-processors\n\nEXPLANATORY NOTE:\n\nThis Annex needs to be completed in case of specific authorisation of sub-processors (Clause 7.7(a), Option 1).\n\nThe controller has authorised the use of the following sub-processors:\n\n1.\n\nName: ...\n\nAddress: ...\n\nContact person’s name, position and contact details: ...\n\nDescription of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): ...\n\n2.\n\n...\n\n","marks":[],"text_hash":"a61c777086f7030a1074658ffab4908af3be66b4fc5f7d2af816731a1a702009","revision":1}}