1. International Data Transfers: Required when personal data will be transferred outside the EU/EEA

2. Special Categories of Data: Required when processing sensitive personal data as defined in GDPR Article 9

3. Data Protection Impact Assessment: Required when processing is likely to result in high risk to individuals

4. Joint Controller Provisions: Required when parties act as joint controllers rather than controller-processor

5. Insurance Requirements: Optional section specifying required insurance coverage for data protection

6. Processor Personnel: Detailed requirements for staff training and confidentiality obligations

7. Business Continuity and Disaster Recovery: Required for critical processing activities

8. Exit Management: Detailed procedures for transitioning services to another processor

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects and personal data

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented by the processor

3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of international transfer mechanisms if applicable

5. Schedule 5 - Security Breach Notification Form: Template for reporting data breaches

6. Schedule 6 - Contact Details: Key contacts for both parties for operational and emergency matters

7. Appendix A - Data Processing Impact Assessment: If required, detailed assessment of processing risks

8. Appendix B - Standard Contractual Clauses: If international transfers are involved, EU approved SCCs