1. Cross-border Transfer Provisions: Required when personal data will be transferred outside Malaysia, ensuring compliance with PDPA's data transfer requirements

2. Audit Rights: Optional provisions for conducting compliance audits, recommended for high-risk data sharing

3. Sub-processing: Required when either party may engage sub-processors to handle the shared data

4. Insurance Requirements: Optional section specifying required insurance coverage for data protection risks

5. Data Protection Impact Assessment: Required for high-risk processing activities or large-scale data sharing

6. Special Categories of Personal Data: Required when sharing sensitive personal data as defined under PDPA

7. Costs and Fees: Optional section when there are specific costs associated with the data sharing arrangement

1. Schedule 1 - Categories of Personal Data: Detailed list of personal data categories to be shared

2. Schedule 2 - Technical and Organizational Security Measures: Specific security measures and protocols to be implemented

3. Schedule 3 - Data Transfer Procedures: Detailed procedures for data transfer, including technical specifications

4. Schedule 4 - Contact Points: List of key contacts for operational matters and breach reporting

5. Schedule 5 - Processing Activities: Detailed description of processing activities and purposes

6. Appendix A - Data Subject Request Procedures: Procedures for handling data subject rights requests

7. Appendix B - Breach Response Plan: Detailed procedures for responding to data breaches