A Data Processing Agreement is required by law when you share personal data with third-party processors. Here's exactly when you need one and what it must…
A Data Processing Agreement (DPA) is one of the most commonly overlooked legal requirements for UK businesses that use third-party software and services. Here is what you need to know.
A DPA is a contract between a data controller — the business that determines how and why personal data is processed — and a data processor — a third party that handles that data on the controller's behalf. Under Article 28 of UK GDPR, this contract is a legal requirement whenever a controller uses a processor.
Loading interactive view…