[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-281884-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-281884-en":127},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","data-processing-agreement-dpa-template-personal-data-protection-terms","Data Processing Agreement (DPA) Template - Personal Data Protection Terms","","Data Processing Agreement (DPA) template defining how a Data Controller and Data Processor share responsibilities when processing personal data under applicable data protection laws. The agreement sets core definitions, scope of processing, documented-instruction requirements, confidentiality, security measures, and rules for engaging sub-processors. It also covers data subject rights support, breach notification details, retention and deletion on termination, audit and inspection cooperation, liability limits, and governing law and exclusive jurisdiction, with annexes for processing specifics.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/forms/","Forms",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/data-processing-agreement-dpa-template-personal-data-protection-terms/281884/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/data-processing-agreement-dpa-template-personal-data-protection-terms/281884.png","ImageObject",442,249,{"name":42,"@type":43},"Ben ","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-27","2026-09-16",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",9,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What does the DPA template define for key terms?","Question",{"text":63,"@type":64},"It defines Personal Data, Processing, and Sub-Processor to clarify the agreement’s scope and responsibilities.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"What obligations must the Processor follow when handling personal data?",{"text":68,"@type":64},"The Processor must act only on documented Controller instructions (unless required by law), keep authorized personnel confidential, and implement appropriate technical and organizational security measures.",{"name":70,"@type":61,"acceptedAnswer":71},"How does the template address sub-processing and data breaches?",{"text":72,"@type":64},"The Processor cannot engage Sub-Processors without prior written consent and must impose the same data protection obligations. It must notify the Controller without undue delay after becoming aware of a personal data breach, including nature, likely consequences, and remediation measures.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},281884,1791614159,{"code":4,"msg":82,"data":83},"success",[84,89,94,99,104,109,113,118,123],{"id":85,"doc_module":22,"doc_module_name":25,"category_name":86,"show_sort_weight":87,"slug":88},11,"Presentations",90,"presentations",{"id":90,"doc_module":22,"doc_module_name":25,"category_name":91,"show_sort_weight":92,"slug":93},12,"Resumes",80,"resumes",{"id":95,"doc_module":22,"doc_module_name":25,"category_name":96,"show_sort_weight":97,"slug":98},14,"Invoices",70,"invoices",{"id":100,"doc_module":22,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},15,"Posters",60,"posters",{"id":105,"doc_module":22,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},16,"Social Media",50,"social-media",{"id":110,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":111,"slug":112},17,40,"forms",{"id":114,"doc_module":22,"doc_module_name":25,"category_name":115,"show_sort_weight":116,"slug":117},18,"Letters",30,"letters",{"id":119,"doc_module":22,"doc_module_name":25,"category_name":120,"show_sort_weight":121,"slug":122},21,"Paper Templates",5,"papers-templates",{"id":124,"doc_module":22,"doc_module_name":25,"category_name":125,"show_sort_weight":4,"slug":126},158,"General","general-158",{"code":4,"msg":82,"data":128},{"doc_id":79,"user_id":129,"nickname":42,"user_avatar":130,"doc_module":22,"category_id":110,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":33,"language":136,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":12,"update_tm":140,"read_time":26,"preview_page_count":4},2336478951081,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","Data Processing Agreement (DPA) Template  \nThis Data Processing Agreement (\"Agreement\") is made on [Date] by and between:  \n• [Data Controller’s Name], a company incorporated under the laws of [Country], with its registered office at [Address](hereinafter referred to as the \"Controller\") .  \n• [Data Processor’s Name], a company incorporated under the laws of [Country], with its registered office at [Address](hereinafter referred to as the \"Processor\") .  \nWHEREAS:  \n1. The Controller and the Processor have entered into an agreement for the provision of services (the \"Service Agreement\"), which involves the processing of personal data.  \n2. The Controller wishes to ensure that the Processor processes personal data in accordance with applicable data protection laws and regulations, including ISO 29100:2024 .  \nNOW, THEREFORE, the parties agree as follows:  \n1. Definitions  \n• \"Personal Data\": Any information relating to an identified or identifiable natural person.  \n• \"Processing\": Any operation or set of operations performed on Personal Data, such as collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, or destruction.  \n• \"Sub-Processor\": Any third party engaged by the Processor to process Personal Data on behalf of the Controller.  \n2. Subject Matter of the Processing  \n• 2.1. The Processor shall process Personal Data only for the purpose of [describe purpose] as set out in the Service Agreement.  \n• 2.2. The types of Personal Data to be processed and the categories of data subjects are set out in Annex 1 to this Agreement.  \n3. Obligations of the Processor  \n• 3.1. The Processor shall process Personal Data only on documented instructions from the Controller unless required to do so by law.  \n• 3.2. The Processor shall ensure that persons authorized to process the Personal Data have committed themselves to confidentiality.  \n• 3.3. The Processor shall implement appropriate technical and organizational measures to ensure the security of Personal Data.  \n4. Sub-Processing  \n• 4.1. The Processor shall not engage any Sub-Processor without the prior written consent of the Controller.  \n• 4.2. Where the Processor engages a Sub-Processor, the Processor shall impose the same data protection obligations as set out in this Agreement.  \n5. Data Subject Rights  \n• 5.1. The Processor shall assist the Controller in fulfilling its obligations to respond to data subjects' requests to exercise their rights under applicable data protection laws.  \n6. Data Breach Notification  \n• 6.1. The Processor shall notify the Controller without undue delay after becoming aware of a personal data breach.  \n• 6.2. The notification shall include a description of the nature of the breach, the likely consequences, and the measures taken or proposed to address the breach.  \n7. Data Retention and Deletion  \n• 7.1. Upon termination of the Service Agreement, the Processor shall, at the choice of the Controller, delete or return all Personal Data to the Controller and delete existing copies unless retention is required by law.  \n8. Audit and Inspection  \n• 8.1. The Processor shall make available to the Controller all information necessary to demonstrate compliance with the obligations laid down in this Agreement and shall allow for and contribute to audits and inspections conducted by the Controller or an auditor mandated by the Controller.  \n9. Liability  \n• 9.1. The Processor shall be liable for the damages caused by the processing only where it has not complied with obligations of this Agreement or where it has acted outside or contrary to lawful instructions of the Controller.  \n10. Governing Law and Jurisdiction  \n• 10.1. This Agreement shall be governed by and construed in accordance with the laws of [Country] .  \n• 10.2. Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of [Jurisdiction] .  \n11. Miscellaneous  \n• 11.1. This Agreemen","cbCaisLSrp0VFWFE","https://ap.wps.com/l/cbCaisLSrp0VFWFE","pdf",123276,"English","# Definitions\n# Subject Matter of the Processing\n# Obligations of the Processor\n# Sub-Processing\n# Data Subject Rights\n# Data Breach Notification\n# Data Retention and Deletion\n# Audit and Inspection\n# Liability\n# Governing Law and Jurisdiction\n# Miscellaneous\n# Annex 1: Details of Processing","[{\"question\":\"What does the DPA template define for key terms?\",\"answer\":\"It defines Personal Data, Processing, and Sub-Processor to clarify the agreement’s scope and responsibilities.\"},{\"question\":\"What obligations must the Processor follow when handling personal data?\",\"answer\":\"The Processor must act only on documented Controller instructions (unless required by law), keep authorized personnel confidential, and implement appropriate technical and organizational security measures.\"},{\"question\":\"How does the template address sub-processing and data breaches?\",\"answer\":\"The Processor cannot engage Sub-Processors without prior written consent and must impose the same data protection obligations. It must notify the Controller without undue delay after becoming aware of a personal data breach, including nature, likely consequences, and remediation measures.\"}]","Data Processing Agreement (DPA) Template - Personal Data Protection Terms | PDF",1789568776]