¶¶Òõ¶ÌÊÓƵ

All Countries
Data Privacy
Data Processing Addendum DPA

Data Processing Addendum DPA Template for Switzerland

Create a bespoke document in minutes,  or upload and review your own.

4.6 / 5
4.8 / 5

Let's create your Data Processing Addendum DPA

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get your first 2 documents free

Your data doesn't train Genie's AI

You keep IP ownership of your information

Key Requirements PROMPT example:

Data Processing Addendum DPA

"I need a Data Processing Addendum DPA under Swiss law for my cloud software company that will be processing customer data across Switzerland and the EU, with specific provisions for international data transfers and subprocessor management, to be implemented by March 2025."

Celebrated by
Collaborations with
Investors
Document background
The Data Processing Addendum (DPA) is a crucial legal document required whenever a company (controller) engages another party (processor) to process personal data on its behalf under Swiss jurisdiction. This document serves as an addendum to the main service agreement and ensures compliance with the Swiss Federal Data Protection Act (FADP/revFADP) and, where applicable, the GDPR. The DPA outlines essential elements such as processing purposes, data security requirements, breach notification procedures, and cross-border transfer mechanisms. It becomes particularly important in the context of Switzerland's unique position as a non-EU country that maintains close alignment with EU data protection standards. The document must be in place before any data processing activities commence and should be updated as regulatory requirements or processing activities change.
Suggested Sections

1. Parties: Identification of the data controller and data processor, including full legal names and addresses

2. Background: Context of the relationship between parties and purpose of the DPA as an addendum to the main service agreement

3. Definitions: Key terms used in the agreement, including those from FADP/revFADP and GDPR where applicable

4. Scope and Purpose: Details of the data processing activities covered by the agreement

5. Roles and Responsibilities: Clear delineation of roles as controller and processor, and their respective obligations

6. Processing Instructions: Controller's instructions for data processing and processor's obligation to follow them

7. Confidentiality: Confidentiality obligations and personnel access restrictions

8. Security Measures: Technical and organizational security measures required to protect personal data

9. Subprocessing: Conditions and requirements for engaging subprocessors

10. Data Subject Rights: Processor's obligations to assist controller with data subject requests

11. Data Breach Notification: Procedures and timeframes for reporting data breaches

12. Audit Rights: Controller's rights to audit and processor's obligations to demonstrate compliance

13. Data Transfer Mechanisms: Requirements for international data transfers

14. Term and Termination: Duration of the DPA and termination provisions

15. Return or Deletion of Data: Obligations regarding personal data upon termination

16. Governing Law and Jurisdiction: Specification of Swiss law as governing law and jurisdiction for disputes

Optional Sections

1. GDPR Specific Provisions: Additional provisions specifically addressing GDPR requirements when processing EU resident data

2. Data Protection Impact Assessments: Processor's obligations to assist with DPIAs when required

3. Insurance Requirements: Specific insurance obligations for data protection risks

4. Joint Controller Provisions: Additional provisions when parties act as joint controllers rather than controller-processor

5. Industry-Specific Requirements: Additional provisions for specific industries (e.g., healthcare, financial services)

6. Data Protection Officer: Provisions regarding DPO appointment and coordination

7. Special Categories of Data: Additional safeguards for processing sensitive personal data

8. Liability and Indemnification: Specific liability provisions for data protection breaches

Suggested Schedules

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects, types of personal data, and processing purposes

2. Schedule 2 - Technical and Organizational Measures: Detailed description of security measures implemented to protect personal data

3. Schedule 3 - Approved Subprocessors: List of approved subprocessors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for international data transfers, including standard contractual clauses if applicable

5. Schedule 5 - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches

6. Appendix A - Contact Details: Contact information for key personnel responsible for data protection

7. Appendix B - Audit Procedures: Detailed procedures for conducting compliance audits

Authors

Alex Denne

Head of Growth (Open Source Law) @ ¶¶Òõ¶ÌÊÓƵ | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents | Serial Founder & Legal AI Author

alex.den.21@genieai.co
Relevant legal definitions








































Clauses






























Relevant Industries

Technology and Software

Financial Services

Healthcare and Medical

Professional Services

E-commerce and Retail

Manufacturing

Education

Telecommunications

Insurance

Pharmaceutical

Consulting

Cloud Services

Marketing and Advertising

Research and Development

Human Resources Services

Relevant Teams

Legal

Compliance

Information Security

IT

Privacy

Risk Management

Procurement

Vendor Management

Data Protection

Information Governance

Corporate Affairs

Operations

Relevant Roles

Chief Privacy Officer

Data Protection Officer

Legal Counsel

Compliance Manager

Information Security Manager

IT Director

Chief Technology Officer

Chief Information Security Officer

Privacy Manager

Contract Manager

Risk Manager

Chief Legal Officer

Data Protection Specialist

Procurement Manager

Vendor Management Officer

Industries








Teams

Employer, Employee, Start Date, Job Title, Department, Location, Probationary Period, Notice Period, Salary, Overtime, Vacation Pay, Statutory Holidays, Benefits, Bonus, Expenses, Working Hours, Rest Breaks,  Leaves of Absence, Confidentiality, Intellectual Property, Non-Solicitation, Non-Competition, Code of Conduct, Termination,  Severance Pay, Governing Law, Entire Agreemen

Find the exact document you need

International Data Transfer Addendum

Swiss law-governed addendum for regulating international personal data transfers, ensuring compliance with FADP requirements and data protection standards.

find out more

Intra Group Agreement Data Protection

Swiss law-governed agreement regulating data protection and transfers between group companies under FADP/DSG.

find out more

Joint Controller Agreement

A Swiss law-governed agreement establishing responsibilities and obligations between joint controllers for personal data processing under FADP and considering GDPR requirements.

find out more

Standard Data Processing Agreement

Swiss law-governed Data Processing Agreement establishing controller-processor obligations under FADP/DSG and aligned with GDPR requirements.

find out more

Data Addendum

Swiss law-governed data protection addendum establishing data processing obligations and compliance with FADP/DPA requirements.

find out more

Data Processing Addendum DPA

A Swiss law-governed agreement defining terms and responsibilities for personal data processing between controller and processor, ensuring compliance with FADP/revFADP and relevant GDPR requirements.

find out more

International Data Protection Agreement

Swiss law-governed agreement regulating international data protection and cross-border data transfers, ensuring compliance with Swiss FADP and relevant international standards.

find out more

Data Sharing Agreement Controller To Processor

Swiss law-governed Data Sharing Agreement between Controller and Processor, ensuring FADP/LPD compliance and establishing data processing safeguards.

find out more

Processor To Processor DPA

A Swiss law-governed agreement between two data processors establishing terms and conditions for delegated data processing activities.

find out more

Controller To Controller Data Processing Agreement

Swiss law-governed agreement establishing data sharing framework between two independent data controllers, ensuring FADP compliance and defining mutual data protection responsibilities.

find out more

Intercompany Data Processing Agreement

Swiss law-governed agreement regulating intra-group personal data processing activities, ensuring compliance with Swiss FADP and relevant GDPR requirements.

find out more

Controller To Controller DPA

Swiss law-governed agreement between two data controllers establishing framework for lawful personal data sharing and processing.

find out more

DPA Agreement

Swiss law-governed Data Processing Agreement defining controller-processor relationships and compliance requirements under FADP/DSG.

find out more

Order Processing Agreement

A Swiss law-governed agreement between a data controller and processor that establishes obligations and responsibilities for personal data processing under FADP/DSG.

find out more

Data Privacy Addendum

Swiss law-governed Data Privacy Addendum ensuring compliance with Swiss FADP/revFADP and alignment with GDPR requirements for personal data processing.

find out more

Sub Processing Agreement

A Swiss law-governed agreement establishing terms for sub-processor data handling, ensuring compliance with Swiss FADP and related data protection requirements.

find out more

International Data Transfer Agreement

Swiss-law governed International Data Transfer Agreement for compliant cross-border personal data transfers under the revFDPA.

find out more

Data Protection Addendum

A Swiss law-governed Data Protection Addendum establishing data processing requirements and responsibilities between parties under Swiss FADP/DSG.

find out more

Download our whitepaper on the future of AI in Legal

By providing your email address you are consenting to our Privacy Notice.
Thank you for downloading our whitepaper. This should arrive in your inbox shortly. In the meantime, why not jump straight to a section that interests you here: /our-research
Oops! Something went wrong while submitting the form.

³Ò±ð²Ô¾±±ð’s Security Promise

Genie is the safest place to draft. Here’s how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

Our bank-grade security infrastructure undergoes regular external audits

We are ISO27001 certified, so your data is secure

Organizational security

You retain IP ownership of your documents

You have full control over your data and who gets to see it

Innovation in privacy:

Genie partnered with the Computational Privacy Department at Imperial College London

Together, we ran a £1 million research project on privacy and anonymity in legal contracts

Want to know more?

Visit our for more details and real-time security updates.

Read our Privacy Policy.