Laws, courts and authorities
data processing agreement
In short and in plain language
A data processing agreement is a contract with a service provider.
The provider works with data about people for a firm. It does so only as the firm tells it. Examples are web hosts or a newsletter tool.
The data rules of the European Union call for such a contract. It sets out the aim, the scope and how the data is kept safe.
The firm that gives the job stays in charge of the data.
Definition
A data processing agreement is a contract with a service provider that processes personal data on a business's instructions. Typical examples are hosts and newsletter services; the GDPR provides for such a contract covering purpose, scope and safeguards. The commissioning business remains responsible for the data.