Create a bespoke document in minutes, Â or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Data Processing Addendum
"I need a Data Processing Addendum for my cloud software company based in Dublin that will process customer data across the EU and UK, with the ability to add multiple sub-processors throughout 2025 and include standard contractual clauses for international transfers."
1. Parties: Identification of the Data Controller and Data Processor, including registered addresses and company details
2. Background: Context of the relationship between parties, reference to main agreement, and purpose of the DPA
3. Definitions: Definitions of key terms used in the DPA, including GDPR-specific terminology
4. Scope and Purpose: Details of the processing activities covered by the addendum and their purpose
5. Duration: Term of the DPA and its relationship to the main agreement's duration
6. Nature and Purpose of Processing: Detailed description of how and why personal data will be processed
7. Processor Obligations: Core obligations of the processor under GDPR Article 28, including security measures, confidentiality, and cooperation requirements
8. Sub-processing: Rules and requirements for engaging sub-processors, including authorization processes
9. Data Subject Rights: Processor's obligations to assist controller with data subject requests
10. Data Security: Security measures required to protect personal data during processing
11. Data Breach Notification: Procedures and timeframes for reporting data breaches
12. Audit Rights: Controller's rights to audit processor's compliance and processor's obligations to demonstrate compliance
13. Return or Deletion of Data: Requirements for handling personal data upon termination of services
14. Liability and Indemnities: Allocation of responsibility and liability between parties
15. Governing Law and Jurisdiction: Confirmation of Irish law as governing law and jurisdiction for disputes
1. International Data Transfers: Required when personal data will be transferred outside the EEA, incorporating Standard Contractual Clauses
2. Special Categories of Data: Additional safeguards required when processing sensitive personal data under Article 9 GDPR
3. Joint Controller Provisions: Required when the relationship includes elements of joint controllership
4. Industry-Specific Compliance: Additional requirements for specific regulated industries (e.g., healthcare, financial services)
5. Data Protection Impact Assessments: Processor's obligations to assist with DPIAs when required
6. Representative in the EU: Required when the processor is not established in the EU but Article 27 GDPR applies
7. Insurance Requirements: Specific insurance obligations for data protection-related risks
1. Details of Processing Activities: Detailed description of processing activities, categories of data subjects, types of personal data, and processing purposes
2. Technical and Organizational Measures: Specific security measures implemented by the processor to ensure appropriate level of security
3. Authorized Sub-processors: List of approved sub-processors and their processing activities
4. Standard Contractual Clauses: EU SCCs for international data transfers when applicable
5. Data Breach Response Plan: Detailed procedures and contact information for data breach reporting and management
6. Audit Procedures: Specific procedures and requirements for conducting compliance audits
7. Contact Details: Key contacts for data protection matters, including DPO details where applicable
Authors
Technology and Software
Healthcare and Medical Services
Financial Services
Professional Services
E-commerce and Retail
Education
Telecommunications
Manufacturing
Insurance
Consulting
Marketing and Advertising
Research and Development
Cloud Services
Human Resources Services
Logistics and Transportation
Legal
Compliance
Information Security
Privacy
Information Technology
Procurement
Risk Management
Operations
Vendor Management
Information Governance
Data Protection
Data Protection Officer
Privacy Counsel
Legal Counsel
Compliance Manager
Information Security Manager
Privacy Manager
Risk Manager
Commercial Contract Manager
IT Director
Chief Technology Officer
Chief Information Security Officer
Chief Privacy Officer
Procurement Manager
Vendor Management Officer
Operations Director
Chief Legal Officer
Data Protection Specialist
Information Governance Manager
Find the exact document you need
Gdpr Intercompany Agreement
Irish law-governed GDPR Intercompany Agreement for regulating personal data transfers and processing between group companies under Irish and EU data protection requirements.
Sub Processor Agreement
An Irish law-governed agreement establishing terms for delegated data processing activities between a processor and sub-processor, ensuring GDPR compliance.
Data Processing Agreement Addendum
An Irish law-governed addendum establishing GDPR-compliant terms for data processing activities between controllers and processors.
Third Party Processing Agreement
An Irish law-governed agreement establishing terms for third-party processing of personal data in compliance with GDPR and local data protection requirements.
Data Processing Contract
An Irish law-governed agreement establishing terms for personal data processing activities between a Data Controller and Data Processor, ensuring GDPR compliance.
Data Processing Addendum
An Irish law-governed Data Processing Addendum that establishes GDPR-compliant terms for personal data processing between controllers and processors.
Data Addendum
An Irish law-governed Data Addendum establishing GDPR-compliant data processing terms between controllers and processors.
Controller To Controller Agreement GDPR
Irish law Controller to Controller Agreement establishing GDPR-compliant data sharing framework between independent data controllers.
Data Sharing Agreement Controller To Processor
An Irish law-governed agreement establishing terms for personal data processing between a Controller and Processor, ensuring GDPR compliance.
Third Party Data Processing Agreement
An Irish law-governed Data Processing Agreement establishing GDPR-compliant terms between a data controller and processor.
Data Transfer Addendum
An Irish law-governed addendum that establishes compliant mechanisms for international personal data transfers under GDPR and Irish data protection laws.
Controller Processor Agreement
An Irish law-governed agreement establishing terms for processing personal data under GDPR, between a data controller and processor.
Order Processing Agreement
An Irish law-governed agreement establishing terms for order processing services, ensuring GDPR compliance and data protection requirements.
Data Protection Agreement For Employees
An Irish law-governed agreement establishing data protection protocols between employer and employee, ensuring GDPR compliance and proper handling of employee personal data.
Sub Processing Agreement
An Irish law-governed agreement between a data processor and sub-processor establishing terms for personal data processing in compliance with GDPR and Irish data protection legislation.
International Data Transfer Agreement
Irish law-governed agreement for compliant transfer of personal data from Ireland/EU to non-EEA countries, ensuring GDPR and local law compliance.
Data Transfer Agreement
An Irish law-governed agreement establishing terms for compliant transfer of personal data between organizations under GDPR and Irish data protection legislation.
Download our whitepaper on the future of AI in Legal
³Ò±ð²Ô¾±±ð’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.