1. Cross-Border Transfers: Required when sub-processing involves transfer of data outside Hong Kong, including specific safeguards

2. Staff Transfer Provisions: Needed when staff or contractors are being transferred as part of the arrangement

3. Business Continuity: Optional section for critical processing activities requiring specific disaster recovery measures

4. Insurance Requirements: Detailed insurance obligations when processing high-risk or sensitive data

5. Intellectual Property Rights: Required when sub-processing involves creation or use of intellectual property

6. Change Control: Formal procedures for changing processing activities or terms, recommended for complex arrangements

1. Schedule 1 - Processing Activities: Detailed description of authorized processing activities, including data types, purposes, and duration

2. Schedule 2 - Technical and Security Measures: Specific security requirements and controls to be implemented

3. Schedule 3 - Fee Schedule: Pricing and payment terms for sub-processing services

4. Schedule 4 - Service Levels: Performance metrics and service level requirements

5. Appendix A - Data Transfer Mechanisms: Details of cross-border transfer mechanisms and safeguards if applicable

6. Appendix B - Contact Details: Key contacts for operational, technical and emergency communications

7. Appendix C - Approved Sub-Sub-Processors: List of any approved further sub-processors and their processing activities