Master Data Protection Agreement Template for Switzerland

1. International Data Transfers: Required when personal data will be transferred outside Switzerland, including appropriate safeguards

2. Special Categories of Data: Additional provisions when processing sensitive personal data as defined in FADP

3. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., financial services, healthcare)

4. Data Protection Impact Assessments: Procedures for conducting DPIAs when required

5. Joint Controller Provisions: Required when parties act as joint controllers rather than controller-processor

6. Insurance Requirements: Specific insurance obligations for data protection risks

7. Business Continuity: Provisions for ensuring continuous data protection during disruptions

8. Exit Management: Detailed procedures for transitioning services to another provider

1. Schedule 1 - Processing Details: Detailed description of processing activities, including categories of data subjects, types of personal data, and processing purposes

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented by the processor

3. Schedule 3 - Approved Subprocessors: List of approved subprocessors and their processing activities

4. Schedule 4 - Data Transfer Mechanisms: Details of mechanisms used for international data transfers

5. Schedule 5 - Service Levels: Performance metrics and response times for data protection-related services

6. Schedule 6 - Security Breach Response Plan: Detailed procedures for handling and reporting security incidents

7. Schedule 7 - Audit Procedures: Detailed procedures and requirements for conducting audits

8. Appendix A - Contact Details: Contact information for key personnel and data protection officers