Major technology providers could rethink how they package arrangements around the sub-processing of personal data into the products and services they offer businesses in response to new guidance issued by the UK’s data protection authority, an expert has said.