F-Q21 Data Transfer and Processing Agreement
| File Reference : | F-Q21 Data Transfer and Processing Agreement |
This form allows you to complete a data transfer and processing agreement, detailing the data transferred/processed and a declaration from the data processor, with confirmation from the data protection officer.
This form template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Form number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested form templates. No junk, jargon or unnecessary fields. Simple and usable form templates
developed over 25 years through practical use in the real world. No AI generated nonsense here!
Further guidance on data processing and UK GDPR:
Download this form template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This form is also included in the GDPR / Data Protection Toolkit and every alphaZ ISO toolkit that covers data protection, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like hands-on help putting data processing agreements in place, or your wider data protection, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Data Transfer and Processing Agreement Template
A data transfer and processing agreement for putting the required contract in place with any organisation that processes personal data on your behalf. It records the processor's details and a summary of the personal data processed, then sets out a declaration covering how that data will be handled, secured and protected.
As a data controller, UK GDPR requires you to have a written contract with any processor acting on your behalf, setting out how they will protect the data (Article 28). This form gives you that agreement in a practical, ready-to-complete format with the processor's declaration built in.
Built for UK GDPR Processor Contracts
The agreement captures what a processor contract needs to cover:
- The data processor's details and all locations where processing takes place
- A summary of the personal data transferred and processed, its purpose and how long it is held
- A declaration covering lawful processing, security, accuracy and breach notification
- A confirmation that data stays within the UK or EEA unless you consent otherwise
What's Included in this Data Transfer and Processing Agreement
The form is set out so the agreement can be completed and signed in one place:
- General details - the requirement for a contract and the terms that apply
- Data processor details - company name and all processing locations
- Personal data summary - an overview of the data, its processing and purpose, and the duration held
- Processor declaration and confirmation - the commitments on handling and security, signed and dated
Who Needs a Data Transfer and Processing Agreement?
Any organisation that uses a supplier, contractor or service to process personal data on its behalf - payroll, IT, marketing, cloud services - needs a written processing agreement. It suits any data controller meeting its UK GDPR obligations.
Pairs with the Personal Data Matrix
The data you place with a processor should already be mapped on the F-Q18 Personal Data Matrix, so the two documents work together.