Instruct: Classify the following sentence into a predefined topic category:
What must be stipulated in the contract or other legal act between the controller and the processor?
Assign it to one of the following topics:[Chapter 4: Controller and processor, Chapter 5: Transfers of personal data to third countries or international organisations, Chapter 11: Final provisions, Chapter 7: Cooperation and consistency, Chapter 6: Independent supervisory authorities, Chapter 3: Rights of the data subject, Chapter 8: Remedies, liability and penalties, Chapter 2: Principles, Chapter 9: Provisions relating to specific processing situations, Chapter 1: General provisions, Chapter 10: Delegated acts and implementing acts]
Output: