A UK GDPR-compliant data processing agreement for controller-processor relationships. Required wherever you share personal data with a third party that processes it on your behalf (or vice versa).
What’s included:
• A consultation to understand the data processing relationship.
• Drafting of a DPA compliant with UK GDPR Article 28, covering processing instructions, security measures, sub-processing, breach notification, audit rights, and data deletion.
• One round of revisions based on your feedback.
• Final version ready to use.
What’s not included:
• Negotiation with the other party beyond the scope described above.
• Data sharing agreements between controllers (see separate service).
• Tax advice (including VAT, corporation tax, income tax, capital gains tax, and stamp duty). If specialist tax advice is needed, I can recommend a suitable accountant or tax adviser.
A UK GDPR-compliant data processing agreement for controller-processor relationships. Required wherever you share personal data with a third party that processes it on your behalf (or vice versa).
What’s included:
• A consultation to understand the data processing relationship.
• Drafting of a DPA compliant with UK GDPR Article 28, covering processing instructions, security measures, sub-processing, breach notification, audit rights, and data deletion.
• One round of revisions based on your feedback.
• Final version ready to use.
What’s not included:
• Negotiation with the other party beyond the scope described above.
• Data sharing agreements between controllers (see separate service).
• Tax advice (including VAT, corporation tax, income tax, capital gains tax, and stamp duty). If specialist tax advice is needed, I can recommend a suitable accountant or tax adviser.