Document background
The Data Addendum is essential for organizations engaged in data processing activities under Austrian jurisdiction, serving as a supplementary agreement to existing service contracts where personal data processing occurs. It becomes necessary when one party processes personal data on behalf of another, ensuring compliance with both the GDPR and Austrian DSG requirements. This document should be implemented whenever there's a controller-processor relationship, particularly when the processing activities fall under Austrian jurisdiction or involve Austrian entities. The Data Addendum includes crucial provisions for data security, breach notification, audit rights, and data handling procedures, while incorporating specific Austrian legal requirements such as works council considerations and local regulatory obligations. It's particularly relevant following the Schrems II decision and updated requirements for international data transfers.
