GDPR

DPA

Data Processing Agreement — processing agreement between controller and processor.

Definition

The DPA (Data Processing Agreement) is a mandatory contractual annex between a controller and its processor, required by Article 28 of the GDPR. It sets out the processor's data protection obligations.

Context & regulatory framework

It must include: subject matter, duration, nature and purpose of the processing, categories of data and data subjects, rights and obligations of the controller, security guarantees, sub-processing, assistance to the controller, and deletion/return of data.

With Data Comply One

How we support you

Data Comply One supports you on DPA with a complete compliance management platform and the expertise of our teams (DPO, CISO, consultants). The goal: help you reach and maintain compliance, calmly, at your own pace.

Want to know more about DPA?

Expert reply within 2h No commitment

By submitting this form, you agree that your data will be processed by Data Comply One to handle your request. To find out more, see our privacy policy.