Data Controller To Data Controller Agreement Template for Philippines

The Data Controller to Data Controller Agreement is essential when two or more organizations need to share personal data while maintaining independent control over their respective data processing activities. This document is specifically tailored for use under Philippine jurisdiction and ensures compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations, as well as relevant National Privacy Commission (NPC) issuances. It is particularly important when organizations need to establish clear boundaries of responsibility, implement appropriate security measures, and ensure proper handling of data subject rights. The agreement typically includes detailed provisions on data protection obligations, security requirements, breach notification procedures, and liability allocation, making it crucial for organizations that regularly share personal data while maintaining separate control over their processing activities.

1. Parties: Identification of the data controllers entering into the agreement, including their registered addresses and company details

2. Background: Context of the data sharing arrangement, purpose of the agreement, and brief description of the parties' operations

3. Definitions: Definitions of key terms used in the agreement, including technical terms and those defined in the Data Privacy Act

4. Purpose and Scope: Detailed description of the purpose of data sharing and scope of data processing activities

5. Categories of Personal Data: Specification of the types of personal data to be shared between the controllers

6. Data Protection Obligations: General obligations of both parties under the Data Privacy Act and related regulations

7. Security Measures: Technical and organizational measures required to protect the shared personal data

8. Data Subject Rights: Procedures for handling data subject requests and ensuring data subject rights

9. Confidentiality: Obligations regarding confidentiality of shared data and business information

10. Breach Notification: Procedures for notifying the other party and authorities in case of data breaches

11. Liability and Indemnification: Allocation of liability and indemnification obligations between the parties

12. Term and Termination: Duration of the agreement and conditions for termination

13. Governing Law and Jurisdiction: Specification of Philippine law as governing law and jurisdiction for disputes

14. General Provisions: Standard contractual provisions including severability, entire agreement, and amendments