Document background
This Controller to Controller DPA is essential when two organizations, each acting as independent data controllers, need to share or exchange personal data while operating under Austrian jurisdiction. The document is required to comply with Article 26 of the GDPR and the Austrian Data Protection Act (DSG) when both parties independently determine the purposes and means of processing personal data. It should be used when organizations need to establish clear protocols for data sharing, outline respective responsibilities, ensure compliance with data protection principles, and define security measures. The agreement includes specific provisions required under Austrian law, addresses liability allocation, and incorporates necessary technical and organizational measures for data protection. This document is particularly important for cross-organizational data sharing initiatives where both parties maintain separate control over the processed data.
