Term
Data processing agreement
Term, not defined in lawGDPR
This is not a legal definition. Mandated by Art. 28(3) GDPR.
The mandatory contract between controller and processor setting out exactly what the processor may and may not do with the personal data. Under the EHDS it recurs in the allocation of roles (phase 2, when the HDAB becomes the user's processor).
Questions about what this term means for your organisation? Contact Mr. Dr. Vlieger.
