Joint Controller Data Sharing Agreement Template for Indonesia

1. Cross-border Data Transfers: Required when personal data will be transferred outside Indonesia, detailing compliance with transfer requirements

2. Sector-Specific Requirements: Additional provisions for regulated sectors such as financial services or healthcare

3. Data Protection Impact Assessment: Required when processing activities are likely to result in high risks to individuals

4. Audit Rights: Provisions for conducting compliance audits between joint controllers

5. Insurance Requirements: Specific insurance obligations for data protection risks

6. Sub-processing: Procedures for engaging sub-processors if relevant to the arrangement

1. Schedule 1 - Categories of Personal Data: Detailed list of personal data types being processed and shared

2. Schedule 2 - Technical and Security Requirements: Specific security measures and technical requirements for data sharing

3. Schedule 3 - Data Processing Activities: Detailed description of processing activities carried out by each controller

4. Schedule 4 - Contact Points and Escalation Procedure: Key contacts and procedures for operational and emergency communications

5. Schedule 5 - Data Subject Request Procedure: Detailed procedures for handling various types of data subject requests

6. Appendix A - Standard Operating Procedures: Day-to-day operational procedures for data sharing

7. Appendix B - Privacy Notice Template: Template for joint privacy notice to be provided to data subjects