Generate a GDPR Article 28 Data Processing Agreement

# Data Processing Agreement **Effective date:** 9 September 2026 This Data Processing Agreement ("DPA") forms part of the agreement between **[Controller name]** (the "Controller") and **[Processor name]** (the "Processor") for the provision of the services described in the underlying agreement between the parties (the "Services"). It governs the Processor’s processing of personal data on behalf of the Controller. Where it conflicts with the underlying agreement, this DPA prevails on data-protection matters. --- ## 1. Definitions **"Data Protection Law"** means all laws applicable to the processing of personal data under this DPA, including the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). **"Controller", "Processor", "Data Subject", "Personal Data", "Processing", and "Personal Data Breach"** have the meanings given in the GDPR. **"Sub-processor"** means any third party engaged by the Processor to process Personal Data on behalf of the Controller under this DPA. --- ## 2. Roles and scope of processing The Controller determines the purposes and means of the Processing. The Processor processes Personal Data only on behalf of the Controller and in…(unlock to see the full DPA)