Free tool
Article 28(2) notice generator
Fill in your company, the provider that changed, and the new sub-processor to generate a ready-to-send GDPR Article 28(2) customer notice you can copy or download. Free, no signup. For ongoing changes, Registora drafts this notice automatically the moment a provider updates.
Your notice
Subject: Sub-processor update notice - [Provider] ([Your company]) Dear customer, This is a notice under Article 28(2) of the GDPR. [Your company] engages [Provider] to help deliver our service. [Provider] has updated its own list of sub-processors, which affects our processing chain. The change is: - Newly engaged: [Sub-processor name] You may object to this change until 06 July 2026 (30 days from today). If we do not hear from you by then, the change takes effect and [Provider] will continue to be used with the updated sub-processor arrangement. No action is required from you unless you wish to object. This notice is provided so you can exercise your right to object to a new sub-processor. If you have any questions, simply reply to this email and our team will respond directly. Kind regards, [Your company]
§
Questions
- What is a GDPR Article 28(2) sub-processor notice?
- Under GDPR Article 28(2), a processor that engages a new sub-processor (or replaces one) must inform the controller - its customer - and give them the opportunity to object before the change takes effect. Most DPAs implement this as a list plus prior notice, with a notice window commonly between 10 and 30 days.
- Is this notice legally binding or sufficient on its own?
- This generator produces a clear, standard notice you can adapt. It is a practical starting point, not legal advice; your own Data Processing Addendum sets the exact notice window and mechanism, so align the wording with your DPA and have counsel review if in doubt.
- How do I avoid sending these manually every time?
- Registora monitors your upstream providers daily, amends your public subprocessor register when one changes, and auto-drafts this exact Article 28(2) notice for you to approve and send - so you are not assembling notices by hand.
Stop assembling these by hand
Registora drafts the notice automatically when a provider changes.
We monitor your upstream providers daily, amend your public register, and draft the Article 28(2) notice for you to approve and send.