Create a bespoke document in minutes, Â or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
DPA Addendum
1. Parties: Identification of the data controller and data processor, including full legal names and registration details
2. Background: Context of the DPA Addendum, referring to the main agreement it supplements and the nature of data processing relationship
3. Definitions: Key terms used in the agreement, including those from GDPR and additional contract-specific definitions
4. Scope and Purpose: Defines the scope of data processing activities covered and their specific purposes
5. Data Processor Obligations: Core obligations of the data processor under GDPR Article 28, including processing only on documented instructions
6. Technical and Organizational Measures: Security measures implemented to ensure appropriate level of data protection
7. Sub-processors: Rules and procedures for engaging sub-processors, including authorization requirements
8. International Transfers: Requirements and safeguards for transfers of personal data outside the EU/EEA
9. Data Subject Rights: Processor's obligations to assist controller in responding to data subject requests
10. Personal Data Breach: Notification requirements and procedures in case of data breaches
11. Audit Rights: Controller's rights to audit and processor's obligations to demonstrate compliance
12. Term and Termination: Duration of the DPA and conditions for termination
13. Return or Deletion of Data: Obligations regarding personal data upon termination of services
1. Specific Processing Instructions: Detailed processing instructions when the processing activities are complex or require specific procedures
2. Industry-Specific Requirements: Additional requirements for specific sectors (e.g., healthcare, financial services)
3. Data Protection Impact Assessments: Specific obligations regarding DPIAs when processing is likely to result in high risk
4. Joint Controller Provisions: Additional provisions when the relationship involves joint controllership
5. Insurance Requirements: Specific insurance obligations for data protection
6. Compensation and Liability: Specific provisions on liability allocation and compensation beyond standard terms
1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects, types of personal data, and processing purposes
2. Schedule 2 - Technical and Organizational Measures: Detailed description of security measures implemented by the processor
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Transfer Mechanisms: Details of transfer mechanisms used for international data transfers
5. Schedule 5 - Contact Points: List of key contacts for data protection matters, breach notification, and general communication
6. Schedule 6 - Standard Contractual Clauses: EU Standard Contractual Clauses if applicable for international transfers
Authors
Find the exact document you need
Download our whitepaper on the future of AI in Legal
³Ò±ð²Ô¾±±ð’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.