Data Processing Agreements
In many situations, when an organisation wishes to process personal data, it is preferable to engage a third-party contractor to carry out the processing, particularly where it is complex and requires specialist knowledge or systems.
A data controller (that is, the party who collects and holds the original data and determines what is to be done with it) should, when engaging a data processor, put in place a contract that ensures that the data processor will comply with their legal obligations and fully protect the personal data they are processing on the controller’s behalf and the rights of the individuals whose data is being processed.
The range of data processing agreement templates in this subfolder are compatible with the UK's data protection legislation, in particular the UK GDPR (which took over from the EU GDPR upon the UK's departure from the EU). Templates are available for processing carried out only within the UK, for the transfer of data to processors within the European Economic Area, and for processing outside of the UK and EEA in "third countries".
- Data Processing Agreement (UK to EEA)
- Data Processing Agreement (UK to Non-EEA)
- Data Processing Agreement (UK)
- International Data Transfer Agreement
Data Processing Agreements is part of Business Documents. Just £35.00 + VAT provides unlimited downloads from Business Documents for 1 year.