Skip to content
All terms
Term

Data processing agreement

Term, not defined in lawGDPR

This is not a legal definition. Mandated by Art. 28(3) GDPR.

The mandatory contract between controller and processor setting out exactly what the processor may and may not do with the personal data. Under the EHDS it recurs in the allocation of roles (phase 2, when the HDAB becomes the user's processor).

Questions about what this term means for your organisation? Contact Mr. Dr. Vlieger.