These include the data controller who informs the competent authority and the data processor who informs its data controller, as described in the GDPR guidelines on appropriate processing agreements. In accordance with Article 28(3)(h), the agreement must require that if you wish to establish or update a data processing agreement, the above information should help you divide the requirements of the GDPR into more manageable steps. 2.4 Applivery processing of personal data.