Sign the vendor contract

What it’s for

The written contract the Act requires before a processor handles your data. Bracketed numbers are starting points to negotiate and carry no statutory force, unless the clause cites a rule.

What you fill in

1. 1

   The agreement

   A Word document of 15 clauses and two schedules. Every clause cites its basis in the Act or Rules, and the negotiable figures are bracketed and labelled as yours.

2. 2

   What it protects you against

   A vendor acting beyond your instructions, weak security, a breach you hear about late, unapproved sub-processors and transfers, and data left behind when the contract ends.

3. 3

   Before you sign

   Have counsel review it, then both sides sign.

From the video

Two frames from the walkthrough. The worked example is a fictional online store.

Basis Rule 6(1)(f); Rule 7(2); Act s.8(7)(b); Act s.16(1). How we arrived here