Data Processing Agreement
Data Processing Agreement is a contract, often required under GDPR, that governs how a processor handles personal data on behalf of a controller, including obligations and safeguards.
Why it matters
A DPA is frequently required before a deal can close and defines data-handling commitments that questionnaires probe.
Where it appears in the workflow
Negotiated during legal and procurement review, often alongside the security questionnaire.
Common mistakes
- Treating data processing agreement as a universal term with no workflow context.