¶¶Òõ¶ÌÊÓƵ

1. International Transfer Mechanisms: Required when transfers are to countries outside EU/EEA, including SCCs or other transfer mechanisms

2. Sub-processing: Include when the data importer may engage sub-processors, specifying authorization requirements and obligations

3. Special Categories of Data: Required when sensitive personal data is being transferred, specifying additional safeguards

4. Joint Controller Provisions: Include when parties are acting as joint controllers rather than controller-processor

5. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, telecommunications)

6. Insurance Requirements: Specific insurance obligations for high-risk data transfers

7. Business Continuity: Required for critical data transfers, specifying backup and recovery requirements

1. Schedule 1 - Details of Processing: Detailed description of data categories, subjects, purposes, and processing activities

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented by both parties

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities, if applicable

4. Schedule 4 - Transfer Impact Assessment: Assessment of risks and safeguards for international transfers

5. Schedule 5 - Contact Points and Procedures: Key contacts and procedures for operational matters and emergencies

6. Appendix A - Standard Contractual Clauses: EU SCCs if required for international transfers

7. Appendix B - Data Protection Impact Assessment: DPIA results if required for high-risk processing