Data Processing Agreement (DPA)

This Data Processing Agreement (DPA) is made between [Data Controller] and [Data Processor] as of [Effective Date].

1. Definitions

Data Controller: The entity that determines the purposes and means of processing personal data.

Data Processor: The entity that processes personal data on behalf of the Data Controller.

2. Purpose of Processing

The Data Processor shall process personal data only for the following purposes: To provide [specific services]. To comply with applicable laws and regulations.

3. Data Protection Obligations

The Data Processor agrees to: Implement appropriate technical and organizational measures to protect personal data. Assist the Data Controller in responding to data subject requests. Notify the Data Controller of any data breaches without undue delay.

4. Sub-Processing

The Data Processor shall not engage any sub-processor without the prior written consent of the Data Controller.

5. Term and Termination

This DPA shall commence on the Effective Date and shall continue until terminated by either party with [notice period].

6. Governing Law

This DPA shall be governed by the laws of [Jurisdiction].