DPA (Data Processing Agreement)

A DPA (Data Processing Agreement) is the contract required by Article 28 of the GDPR between a data controller (the client) and a processor (such as Certyneo). It specifies the purposes of processing, data categories, security measures, sub-processing conditions and obligations in case of breach. Concluding a DPA is mandatory before any processing of personal data of signatories. Certyneo provides a standard DPA annexed to the Terms of Service.