Commercial
Data processing agreement
The contract governing what a supplier may do with personal data.
Definition
A required agreement under GDPR between a data controller and a processor, setting out what personal data is handled, for what purpose, where it is stored, who may sub-process it, and what happens on termination.
Why it matters
If an outsourcing partner will touch customer data, this is not optional and should exist before the work starts rather than after. The clause people skip is sub-processing: knowing which other companies end up with your data is the point of the document.
Related
Read next
GDPR
The EU regulation governing how personal data may be handled.
Read the definition ›Sub-processor
A supplier's own supplier that also touches your data.
Read the definition ›IP assignment
The clause that makes the work you paid for actually yours.
Read the definition ›Data residency
Where your data physically sits, and which laws follow from that.
Read the definition ›Next step
Ready to build or scale your team?
Tell us what you need and we will match you with pre-vetted Lebanese professionals ready to integrate with your team.