Topic

Data Processing Agreement (DPA)

Data Processing Agreement (DPA) is a contract governing the processing of personal data by one organization on behalf of another. This tag covers legally required privacy and data protection terms for controller-processor and similar relationships, including processing instructions, confidentiality, security, subprocessors, individual rights, audits, deletion and return of data. It includes DPAs under the GDPR, CCPA, and other U.S. and global privacy laws.

Colorado Privacy Act Data Protection Assessments: Understanding the Requirements

Colorado's Privacy Act requires Data Protection Assessments before high-risk processing begins. Learn when a DPA is required, what it must include, how often it must be updated, the risks organizations should evaluate, and practical steps for building a compliant assessment framework.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

Subscribe to The de la Torre Review