Sub Processing Agreement Template for Belgium

The Sub Processing Agreement is essential when a data processor needs to engage another party (sub-processor) to carry out specific data processing activities on their behalf. This document is particularly relevant under Belgian law and EU GDPR requirements, where any delegation of processing activities must be properly documented and controlled. The agreement should be used whenever a processor intends to outsource any part of their processing activities, whether to local or international sub-processors. It includes crucial provisions about data protection measures, liability allocation, breach notification procedures, and audit rights. The document ensures compliance with Article 28 of the GDPR and the Belgian Data Protection Act of 2018, while also addressing specific Belgian contractual law requirements. It's a critical tool for maintaining transparency and accountability in the data processing chain.

1. Parties: Identification of the main processor (as client) and sub-processor (as service provider), including full legal names, registration details, and addresses

2. Background: Context of the agreement, reference to the main processing agreement, and the need for sub-processing services

3. Definitions: Key terms used in the agreement, including GDPR-specific terminology and agreement-specific definitions

4. Scope and Purpose: Details of the sub-processing activities, types of data involved, and processing purposes

5. Duration: Term of the agreement, including commencement date and termination provisions

6. Sub-processor Obligations: Core obligations including compliance with instructions, confidentiality, security measures, and GDPR requirements

7. Technical and Organizational Measures: Specific security measures and standards the sub-processor must maintain

8. Data Subject Rights: Procedures for handling data subject requests and supporting the processor in responding to such requests

9. Personal Data Breach: Notification requirements and procedures in case of data breaches

10. Audit Rights: Processor's rights to audit and inspect sub-processor's compliance

11. Liability and Indemnification: Allocation of liability and indemnification obligations

12. Termination: Grounds for termination and consequences of termination

13. General Provisions: Standard contractual clauses including governing law, jurisdiction, and amendments