Regulatory

DPA

Data Processing Agreement — contract between controller and processor.

Data Processing Agreements, required by GDPR Art. 28, are mandatory contracts between the controller and the processor. They specify purposes, duration, nature, data type, and obligations.