Data Processing Agreement (Common Paper Standard)

A data processing agreement for a provider that handles personal data on behalf of a customer. Key terms cover the categories of data and data subjects, nature and purpose of processing, subprocessors, transfers and security.

Version 1.0

Source: Common Paper (CC BY 4.0)

Use this template

Easy PDF filling and editing

Fill out forms in your browser without installing software
Files are processed on our own server and not shared with third parties
Instant export of the completed document in PDF format

Instructions for filling out Data Processing Agreement (Common Paper Standard)

This template is used for official filing and documentation. Below are detailed instructions for completing, requirement details, and submission rules.

Who needs to fill out this document?

This form is designed for use by legal entities, individuals, or authorized representatives in the following cases:

SaaS vendors that process customer personal data.
Customers asking vendors for a DPA.
Privacy teams working from a recognized standard.

What you will need before starting

Before filling out the interactive form, prepare the following details and documents:

1. Parties and main agreementProvider, customer and the agreement this DPA supports.

2. Data descriptionCategories of personal data and data subjects, and any special category data.

3. Processing detailsNature, purpose, duration and frequency of transfer.

4. Subprocessors and securityApproved subprocessors, security policy and a security contact.

Step-by-step filling process

Identify the parties: Name provider, customer and the main agreement.
Describe the data: List categories of personal data and of data subjects.
Describe the processing: Add purpose, duration, subprocessors and the governing member state if relevant.
Sign: Both parties sign the signature block.

Frequently Asked Questions (FAQ)

When do I need a DPA?

Whenever one company processes personal data for another and privacy laws such as GDPR require a written contract.

Does it work for U.S. data only?

It contains terms for European data too. Check with counsel which parts apply to you.

Is this legal advice?

No. The author publishes it for general reference, not as advice on your situation. Have a qualified lawyer review it before you sign, especially if you operate outside the United States.

Ready to fill out Data Processing Agreement (Common Paper Standard)?

Open the editor, enter the required details, and download your document in a couple of minutes.

Proceed to fill out →

Related templates