Data Processing Agreement (DPA)
What is a Data Processing Agreement?
Data Processing Agreements ensure that all parties involved are properly handling personal data, primarily laying down requirements for Data Processors ("Operator") to meet before they are trusted with the data provided by the Data Controller ("Responsible Party") .
When do I need this?
POPI requires Data Controller ("Responsible Party") to take measures to ensure the protection of personal data they handle. If the Data Controller decides to outsource certain data processing activities, they must be able to demonstrate that their Data Processor ("Operator") provide sufficient data protection and act in a POPI compliant manner.
Do I need a legal expert to assist?
Non-compliance with applicable data protection laws can result in fines which can mean the end of a business. If data protection is not something that you deal with regularly we suggest that you get in touch with one of our recommended contract and commercial transaction specialists to ensure that you understand your rights obligations in relation to data processing.