Hunton Williams reports that the Bavarian Data Protection Authority has fined a Data Controller for having an inadequate Data Processor Agreement in place, with specific reference to the absence of appropriate organisational and technical controls for security in the agreement.