Data Access Agreement Gdpr

Any company that collects personal data (including IP address or geolocation) of EU citizens is expected to comply with the rules of the GDPR. A data processing agreement is a legally binding contract that defines the rights and obligations of each party with regard to the protection of personal data (see „What is personal data?“). Article 28 of the GDPR covers the data processing agreements referred to in Section 3: where the data processor is to transmit or process data outside the EU, the controller must ensure that the processor follows the appropriate GDPR protocols to transmit or store such data.