1. AI and Automated Processing: Required when the virtual assistant uses AI tools or automated processing systems, specifying permitted uses and additional security requirements

2. International Data Transfers: Necessary when the virtual assistant operates from overseas or when data may be transmitted across borders

3. Subcontractor Provisions: Include when the virtual assistant may engage subcontractors or additional team members

4. Intellectual Property Creation: Required when the virtual assistant's role includes creating content or developing intellectual property

5. Privacy Compliance: Detailed privacy obligations when handling personal information, particularly relevant under the NZ Privacy Act 2020

6. Remote Work Security: Specific provisions for securing home office or remote working environments

7. Client Specific Obligations: Special confidentiality requirements for specific clients or industries when the VA works with multiple clients

1. Schedule 1: Categories of Confidential Information: Detailed list of types of confidential information the virtual assistant will have access to

2. Schedule 2: Security Protocols and Requirements: Specific technical and operational security measures required

3. Schedule 3: Approved Software and Tools: List of approved software, platforms, and tools for handling confidential information

4. Appendix A: Data Breach Response Plan: Procedures to follow in case of a data breach or security incident

5. Appendix B: Confidentiality Acknowledgment Form: Form to be signed by any additional team members or subcontractors