thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Data Processing Agreement (DPA)

Contract between a controller and processor setting out GDPR Article 28 obligations.

Definition

A DPA specifies subject matter, duration, nature and purpose of processing, data types, categories of data subjects, and processor obligations such as security, confidentiality, sub-processor rules, assistance, deletion, and audit rights. Similar contractual terms are required under CCPA for service providers and under HIPAA as business associate agreements.

Example

A customer signs a vendor's DPA incorporating SCCs for transfers to the US.

Exam tip

DPA may also mean data protection authority; read context.

Related terms