compliance image

Data Processing Agreement

A free data processing agreement template



Data Processing Agreement

This Data Processing Agreement is made between:

1.The Data Controller:[Your Company Name], a company registered in [Location] with registered number [Number] and having its main place of business at [Address].

2. The Data Processor: [Processor Name], a company registered in [Location] with registered number [Number] and having its main place of business at [Address].

1. Purpose of Processing

The Data Processor agrees to process personal data only for the purpose of [Specify Purpose, e.g., providing IT support, marketing services, etc.].

2. Data Protection Compliance

Both parties will comply with all applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

3. Categories of Data

The personal data processed includes: [List Categories, e.g., names, email addresses, payment details, etc.].

4. Security Measures

The Data Processor will implement appropriate technical and organizational measures to aid in securing the data.

5. Data Subject Rights

The Data Processor will assist the Data Controller in responding to requests from data subjects regarding their rights under UK GDPR.

6. Data Breach Notification

In the event of a data breach, the Data Processor must notify the Data Controller without undue delay and within 24 hours.

7. Sub processors

The Data Processor will not engage any sub processors without prior written approval from the Data Controller.

8. Termination and Data Deletion

Upon termination of this agreement, the Data Processor will delete or return all personal data to the Data Controller unless required by law to retain it.

9. Governing Law

This Agreement shall be governed by and construed in accordance with the laws of England and Wales.

10. Disputes

The Data Processor agrees to binding arbitration in the event of a dispute and agrees that all proceedings will be in the English language.

11. Signatures

Signed for and on behalf of the Data Controller:

Name: ______________________ Date: __________

Position: ______________________

Signature: ______________________


Signed for and on behalf of the Data Processor:

Name: ______________________ Date: __________

Position: ______________________

Signature: ______________________

Witness (this is recommended but not strictly necessary):

Name: ______________________ Date: __________

Position: ______________________

Signature: ______________________