# Processor 28(h) — GDPR — provision context

> Focused context for a single provision (28(h)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-28#par-3-pnt-h
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Processor** (GDPR, full article: https://overview.legal/laws/gdpr/art-28).

## Provision text

### 28(h)

makes available to the controller all information necessary to demonstrate compliance with the obligations laid down in this Article and allow for and contribute to audits, including inspections, conducted by the controller or another auditor mandated by the controller.


## Topics on this provision

- **Accountability** — https://overview.legal/topics/accountability
  Principle of demonstrating GDPR compliance
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Guidelines 07/2020 on the concepts of controller and processor in the GDPR** (guidance) — https://overview.legal/posts/38069
- **Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)** (guidance) — https://overview.legal/posts/125715
- **Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126032
- **Opinion 17/2020 on the draft Standard Contractual Clauses submitted by the SI SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126161
- **Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126212
- **Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)** §44 (guidance, EDPB) — https://overview.legal/posts/126212

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-28#par-3-pnt-h · 2026-08-22