Explanation
Requiring independent audits of the providers' data privacy controls is the best way to ensure third-party providers that process an organization's personal data are addressed as part of the data privacy strategy.
Independent audits can verify that the providers are complying with the applicable data privacy laws and regulations, as well as the organization's own policies and standards. Independent audits can also identify any gaps or weaknesses in the providers' data privacy controls and recommend corrective actions or improvements.
References:
* What Is Your Privacy and Data Protection Strategy? - ISACA
* Why data privacy and third-party risk teams need to work together - OneTrust