COMPLIANCE

DPA

Data Processing Agreement. A contract between a data controller and a data processor that defines how personal data may be handled, required under GDPR and similar laws.

IN PRACTICE

Before a SaaS vendor can process an EU company's customer data, the two sign a DPA spelling out security measures, subprocessors, and breach-notification duties.

← Back to glossary