internet privacy gdpr data-protection
Can my user agreement require end users to indemnify me for misuse of their data by third-party services embedded in my app?
<p>I have an Android App which is already in the Play Store.</p>

<p>Now due to GDPR I am planning to improve my Privacy Policy and a Terms of service.</p>

<p>I am planning to add certain terms in my Terms of service some of which are:</p>

<ol>
<li><p>I am not responsible for any damage/loss caused to your phone by using my app.</p></li>
<li><p>I am using certain services such as X,Y and Z services. And any collection, use or misuse of the data collected by those service I am not responsible.</p></li>
</ol>

<p>I know that the above two points are not framed in an proper legal language but my question is that suppose the user is accepting those two points will it exempt me(My responsibility) from those two cases.</p>

<p>Any help would be grateful.</p>

<p>Term 1 isn't going to hold up, but that is not a GDPR matter. It's just a matter of basic <em>consumer protection</em> law in the EU. You can't offload responsibility for your mistakes. </p>

<p>Looking at 2, Dale M. already pointer out that it's now how the GDPR works. You are the <em>Data Controller</em>. X,Y and Z are <em>Data Processors</em>. Article 28(1) of the GDPR is in direct conflict with your disclaimer. You accept zero responsibility, the GDPR says you are fully responsible. That's the exact opposite.</p>
