Create a bespoke document in minutes, Â or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Intra Group Agreement Data Protection
1. Parties: Identification of the group entities participating in the agreement
2. Background: Context of the agreement, group structure, and purpose of data sharing arrangements
3. Definitions: Key terms used in the agreement, including GDPR-specific terminology and group-specific definitions
4. Scope and Purpose: Detailed description of data processing activities covered and purposes of processing within the group
5. Roles and Responsibilities: Clear designation of controllers, processors, and joint controllers within the group structure
6. Data Protection Principles: Implementation of GDPR principles including lawfulness, fairness, transparency, purpose limitation, data minimization
7. Legal Basis for Processing: Specification of legal grounds for data processing and transfer within the group
8. Security Measures: Standard security measures applicable across the group for protecting personal data
9. Data Subject Rights: Procedures for handling data subject requests and ensuring rights across the group
10. Data Breach Notification: Internal procedures for breach notification and coordination within the group
11. Audit and Compliance: Internal audit procedures and compliance monitoring within the group
12. Term and Termination: Duration of the agreement and conditions for termination
13. Governing Law and Jurisdiction: Specification of Danish law as governing law and jurisdiction arrangements
1. International Data Transfers: Required when group includes entities outside the EEA, detailing transfer mechanisms and safeguards
2. Special Categories of Data: Required when processing sensitive personal data, detailing additional safeguards and procedures
3. Data Protection Impact Assessments: Required when processing is likely to result in high risk to individuals
4. Joint Controller Arrangements: Required when multiple group entities act as joint controllers
5. Sub-processing: Required when group entities may engage external processors
6. Local Data Protection Requirements: Required when specific Danish law requirements need separate attention
1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data and purposes
2. Schedule 2 - Technical and Organizational Measures: Specific security measures and controls implemented across the group
3. Schedule 3 - Data Transfer Map: Map of data flows between group entities including roles and categories of data
4. Schedule 4 - Contact Points: List of DPOs, privacy officers, and key contacts for each group entity
5. Schedule 5 - Standard Forms: Templates for data subject requests, breach notifications, and other standard procedures
6. Appendix A - Group Structure: Diagram and description of participating group entities and their relationships
7. Appendix B - Audit Requirements: Detailed audit procedures and compliance checking requirements
Authors
Find the exact document you need
Download our whitepaper on the future of AI in Legal
³Ò±ð²Ô¾±±ð’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.