Data Processing Addendum (DPA) for U.S., EU, UK and Swiss Personal Data

A processor-friendly addendum that covers U.S. personal data as well as EU/EEA, UK and Swiss personal data, with GDPR-aligned obligations for a vendor that processes data for its customers.

Current Version

Source: General Legal (CC0 1.0)

Use this template

Easy PDF filling and editing

Fill out forms in your browser without installing software
Files are processed on our own server and not shared with third parties
Instant export of the completed document in PDF format

Instructions for filling out Data Processing Addendum (DPA) for U.S., EU, UK and Swiss Personal Data

This template is used for official filing and documentation. Below are detailed instructions for completing, requirement details, and submission rules.

Who needs to fill out this document?

This form is designed for use by legal entities, individuals, or authorized representatives in the following cases:

Vendors with European or UK customers.
Privacy teams standardizing a global DPA.
Procurement teams reviewing vendor data terms.

What you will need before starting

Before filling out the interactive form, prepare the following details and documents:

1. Vendor nameThe company acting as the processor (Provider).

2. Customer agreementThe name and effective date of the agreement the DPA attaches to.

3. Annex detailsRoles, contact emails and a short company description in the annexes.

4. Transfer and security detailsWhere data goes and which safeguards you apply.

Step-by-step filling process

Identify the main agreement: Enter the vendor name and the customer agreement with its date.
Complete the annexes: Add roles, contacts and a company description.
Review the GDPR sections: Check that data locations and safeguards match your real setup.
Sign: Both parties sign; the DPA takes effect on the date both have signed.

Frequently Asked Questions (FAQ)

What is the difference from the U.S. version?

This one adds GDPR and UK GDPR style obligations for European personal data on top of the U.S. state-law terms.

Does it solve international data transfers on its own?

It supports them, but transfer rules depend on your facts. Ask a privacy lawyer how they apply to you.

Is this legal advice?

No. The author publishes it for general reference, not as advice on your situation. Have a qualified lawyer review it before you sign, especially if you operate outside the United States.

Ready to fill out Data Processing Addendum (DPA) for U.S., EU, UK and Swiss Personal Data?

Open the editor, enter the required details, and download your document in a couple of minutes.

Proceed to fill out →

Related templates