Data processing agreement (DPA) is a legally binding document. It’s signed between two key data processing actors under GDPR – the data controller and the data processor.

It regulates the details of data processing, such as the scope and purpose, as well as the relationship between those actors. In addition, it assigns certain obligations required by the new EU law.

Check out the 7 elements every DPA should have.