It is the responsibility of the organization to notify the customer if the processing instructions seem to violate laws or official requirements.
The processors of personal data (e.g. providers of data systems, other partners using our employee or customer data) and the agreements related to the processing of personal data have been documented. The documentation includes e.g.: