Personal Data Agreement Template for Philippines

1. Cross-border Data Transfers: Required when personal data will be transferred outside the Philippines, specifying compliance with cross-border transfer requirements

2. Sub-processing: Include when the data processor may engage sub-processors, specifying conditions and requirements

3. Data Protection Impact Assessment: Required for high-risk processing activities or large-scale processing operations

4. Insurance Requirements: Include when specific insurance coverage for data protection incidents is required

5. Audit Rights: Optional section detailing the controller's right to audit the processor's compliance

6. Force Majeure: Include when specific provisions for handling data protection during force majeure events are needed

7. Special Categories of Data: Required when processing sensitive personal information as defined in the Data Privacy Act

1. Schedule 1 - Categories of Personal Data: Detailed list of personal data categories to be processed

2. Schedule 2 - Technical and Organizational Security Measures: Specific security measures and controls implemented

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their roles, if applicable

4. Schedule 4 - Data Processing Activities: Detailed description of processing activities and purposes

5. Schedule 5 - Contact Details and Escalation Procedures: Contact information for key personnel and escalation procedures

6. Appendix A - Data Subject Request Procedures: Detailed procedures for handling data subject requests

7. Appendix B - Data Breach Response Plan: Detailed procedures for responding to data breaches