The key legal document that specifically outlines the obligations of both parties regarding the handling and protection of personal data processed by a third party under global privacy regulations like the General Data Protection Regulation (GDPR) is called a Data Processing Agreement, often abbreviated as DPA, or sometimes referred to as a Data Processing Addendum. This legally binding contract is required when a Data Controller engages a Data Processor to perform processing activities on their behalf. A Data Controller is the entity that determines the purposes and means of the processing....
Log in to view the answer