If you share personal data with another organisation that uses it for its own purposes, you need a Data Sharing Agreement — not a Data Processing Agreement.…
Two businesses sharing personal data reach for the wrong document more often than almost any other data protection mistake. They sign a Data Processing Agreement when what they actually have is a controller-to-controller relationship that needs a Data Sharing Agreement. The two are not interchangeable. Here is how to tell them apart and what the right one covers.
CONTROLLER OR PROCESSOR? THE QUESTION THAT DECIDES EVERYTHING
Loading interactive view…