A data processing agreement (DPA) is a legally binding document to be entered into between the controller and the processor in writing or in electronic form.
It regulates the particularities of data processing – such as its scope and purpose – as well as the relationship between the controller and the processor.
Where can I find Tilaa's DPA?
Tilaa does indeed have a data processing agreement, the data processing agreement is applicable on all the services we provide and can be downloaded here.
Why is a DPA important?
The GDPR requires data controllers to take measures to ensure the protection of the personal data they handle. If data controllers decide to outsource certain data processing activities, they must be able to demonstrate that their suppliers and sub-processors also provide sufficient guarantees to protect the data and act in a GDPR compliant manner.