| Author: | Alasdair Taylor |
| Updated: | 4 January 2021 |
| Length: | 7 pages |
| Notes: | 8 pages |
| Format: | MS Word (.DOC) |
Consider this template data processing addendum if you need to bring an existing contract into line with the General Data Protection Regulation (GDPR) - in either its original EU or derivative UK form.
This document should however only be used where one party to the contract is a controller and the other is a processor with respect to data transferred under the contract. It should not be used for processor-to-processor or controller-to-controller transfers.
In preparing this addendum, we have tracked the specific requirements of Article 28 of the GDPR closely. Accordingly, the addendum incorporates a limitation on the processor acting otherwise than in accordance with the written instructions of the controller. It also includes limitations on international transfers of personal data, a requirement that confidentiality obligations be placed upon people who can access the data and security requirements.
