Commonly referred to as a “data-processing agreement,” this type of contract governs the relationship between a controller, a processor, and the data being processed. These contracts can come in many forms, but with the EU General Data Protection Regulation in effect, more and more organizations will be updating their vendor contracts to include a data-processing agreement or data-processing addendum. In this article for The Privacy Advisor, John Clarke addresses what data-processing agreements are, why they are necessary, and some key provisions they must contain.
Full Story