Data Processing Agreement (DPA)

What is an data processing agreement (DPA)?

A DPA is a civil law contract that governs the processing of personal data by a contractor on behalf of a client. In this case, the contractor (processor) acts in accordance with instructions on behalf of the client (responsible person).

When is a DPA necessary?

A DPA is required whenever a company processes personal data on behalf of another company. This is the case, for example, if a company commissions a service provider with payroll, hosting data or the use of cloud services where personal data is processed.