A data processing agreement is a contract between a company and a data processor that covers the handling of personal data. The agreement sets out the roles and responsibilities of each party, and the steps that will be taken to protect the data.
This template can be used where a controller appoints a processor to perform services that will result in the processor processing personal data. It is important to ensure you have accurately identified the roles of each party in respect of the personal data being processed. The controller is the entity determining the purpose and means of processing personal data and the processor (the “Provider”) is the entity which processes the personal data on behalf of the controller. This template should not be used for controller to controller data sharing arrangements. This template is a controller friendly version.
This is a data processing agreement for use between a controller and a processor when the contracted services involve the processor processing personal data on behalf of the controller. This agreement is to be used in conjunction with a master service agreement or other similar agreement.
Note: Although we list lawyers as well as legal firms who may be able to help, this does not indicate that the listed law firms have an affiliation or partnership with Genie AI.