Article 28 of the EU General Data Protection Regulation requires data controllers to include in their contracts with processors certain terms and requirements. Sometimes these terms are included in the body of product and service contracts, but frequently they are added to new or existing agreements as an addendum. The IAPP’s Privacy Bar Section will publish a book this fall called “Negotiating Data Processing Agreements,” which will discuss many aspects of these new types of contracts. The book will include a model data-processing agreement, and many of the authors’ chapters will discuss and refer to the model DPA. Today, the IAPP is publishing the model DPA for its members to use and share. IAPP members can find it at the Full Story link. (IAPP member login required.)
Full Story