1. International Transfers: Required when personal data will be transferred outside the EEA, including appropriate safeguards

2. Special Categories of Data: Additional provisions when processing special categories of personal data under Article 9 GDPR

3. Sub-processing: Terms governing the use of sub-processors by either controller

4. Joint Processing Activities: Required when controllers jointly determine purposes and means of specific processing activities

5. Liability and Indemnification: Detailed provisions on allocation of liability between controllers

6. Insurance Requirements: Specific insurance obligations for data protection risks

7. Audit Rights: Provisions for mutual auditing of data protection compliance

1. Schedule 1 - Data Processing Details: Detailed description of data types, processing purposes, and data subject categories

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures implemented by both controllers

3. Schedule 3 - Contact Points and Escalation Procedure: Key contacts and procedures for operational matters and emergencies

4. Schedule 4 - Data Transfer Mechanisms: Details of transfer mechanisms where international transfers occur

5. Schedule 5 - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches

6. Appendix A - Standard Forms: Template forms for data subject requests, breach notifications, and other standard communications

7. Appendix B - Compliance Checklist: Checklist for ongoing compliance monitoring and documentation