Yes, brokers must conclude special contracts for commissioned data processing with external IT service providers such as cloud providers or data centers. These must comply with the requirements of the GDPR and contain clear instructions. The BayLDA checks this.