¶¶Òõ¶ÌÊÓƵ

1. International Data Transfers: Required when data will be transferred outside of New Zealand, addressing compliance with international data protection requirements

2. Special Categories of Data: Include when dealing with sensitive personal information such as health data, biometric data, or financial information

3. Sub-processing: Include when either party may engage sub-processors to handle the data

4. Data Subject Rights: Detailed procedures for handling data subject requests when processing personal data

5. Audit Rights: Include when regular audits of data handling practices are required

6. Insurance Requirements: Include when specific insurance coverage for data-related risks is required

7. Service Level Agreement: Include when specific performance metrics for data processing or availability are required

8. Business Continuity: Include when detailed disaster recovery and business continuity plans are necessary

1. Schedule 1 - Data Processing Details: Detailed description of data types, processing activities, and purposes

2. Schedule 2 - Security Measures: Specific technical and organizational security measures required

3. Schedule 3 - Approved Sub-processors: List of approved sub-processors and their roles (if applicable)

4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for international data transfers (if applicable)

5. Schedule 5 - Data Retention Schedule: Specific retention periods for different types of data

6. Schedule 6 - Contact Details: Key contacts for operational, technical, and legal matters

7. Appendix A - Data Flow Diagram: Visual representation of how data flows between parties

8. Appendix B - Incident Response Plan: Detailed procedures for responding to data security incidents