This Controller Processor Contract is essential for organizations operating under Indian jurisdiction where one entity (the controller) engages another (the processor) to process personal data on its behalf. The document becomes necessary when outsourcing any data processing activities, from cloud storage to customer service operations, and must comply with the Digital Personal Data Protection Act 2023 and related Indian regulations. It contains detailed provisions on data handling, security measures, breach notifications, and compliance requirements specific to Indian law. The agreement is particularly important given India's strict data protection regime and the significant penalties for non-compliance. It should be used whenever a business relationship involves the processing of personal data by a third party, ensuring both parties understand their respective obligations and responsibilities under Indian data protection law.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Your data doesn't train Genie's AI
You keep IP ownership聽of your docs
1. Parties: Identification of the Data Controller and Data Processor, including registered addresses and company details
2. Background: Context of the agreement, relationship between parties, and purpose of data processing
3. Definitions: Key terms used in the agreement, aligned with DPDP Act 2023 terminology
4. Scope and Purpose of Processing: Detailed description of the data processing activities, types of data, and processing purposes
5. Duration of Processing: Term of the agreement and processing period
6. Obligations of the Data Controller: Controller's responsibilities including providing instructions, ensuring legal basis for processing
7. Obligations of the Data Processor: Processor's duties including processing only on documented instructions, ensuring security measures
8. Data Security Measures: Technical and organizational security measures required under Indian law
9. Confidentiality: Confidentiality obligations regarding processed data and business information
10. Sub-processing: Conditions and requirements for engaging sub-processors
11. Data Subject Rights: Procedures for handling data subject requests and processor's assistance obligations
12. Data Breach Notification: Procedures and timeframes for reporting data breaches
13. Audit Rights: Controller's right to audit and processor's obligation to demonstrate compliance
14. Data Return and Deletion: Obligations regarding data handling upon contract termination
15. Liability and Indemnification: Allocation of liability and indemnification obligations
16. Governing Law and Jurisdiction: Specification of Indian law as governing law and jurisdiction for disputes
1. Cross-border Data Transfers: Required when personal data will be transferred outside India, specifying compliance with transfer requirements
2. Sector-Specific Compliance: Needed when processing data in regulated sectors (e.g., financial, healthcare)
3. Business Continuity: Optional section detailing disaster recovery and business continuity requirements
4. Insurance Requirements: Specific insurance obligations for the processor, recommended for high-risk processing
5. Change Control: Procedures for managing changes to processing activities or security measures
6. Exit Management: Detailed procedures for contract termination and transition, recommended for complex processing relationships
1. Schedule 1 - Processing Activities: Detailed description of processing activities, categories of data subjects and personal data
2. Schedule 2 - Technical and Organizational Security Measures: Specific security measures implemented by the processor
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Data Transfer Mechanisms: Details of cross-border transfer mechanisms if applicable
5. Schedule 5 - Service Levels: Performance metrics and service levels for processing activities
6. Appendix A - Contact Details: Key contacts for both parties for operational and emergency matters
7. Appendix B - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches
Find the exact document you need
Pre Negotiation Agreement
An Indian law-governed agreement establishing confidentiality and framework for business negotiations, with binding and non-binding elements.
Download
Third Party Processing Agreement
An Indian law-governed agreement establishing terms for third-party processing of personal and sensitive data, ensuring compliance with IT Act and Rules.
Download
Controller To Controller Agreement
An Indian law-governed agreement establishing terms for personal data sharing between independent data controllers, ensuring compliance with DPDP Act 2023.
Download
Product Development Non Disclosure Agreement
An Indian law-compliant Non-Disclosure Agreement for protecting confidential information during product development activities and collaborations.
Download
Joint Controller Data Processing Agreement
An Indian law-compliant agreement establishing roles and responsibilities between joint controllers for personal data processing activities.
Download
Standard Data Processing Agreement
Indian-law compliant Data Processing Agreement governing the processing of personal data between controllers and processors, aligned with IT Act and DPDP Act requirements.
Download
Dpia Agreement
An Indian law-governed agreement documenting the systematic assessment of data processing risks and protection measures under the Digital Personal Data Protection Act 2023.
Download
Data Agreement
An Indian law-governed Data Agreement establishing terms for data sharing and processing, compliant with Indian data protection regulations.
Download
Data Addendum
An Indian law-governed document that sets out data processing terms and compliance requirements under Indian data protection legislation.
Download
Controller Processor Contract
An Indian law-compliant agreement governing the processing of personal data between a controller and processor under the Digital Personal Data Protection Act 2023.
Download
DPA Contract
An Indian law-governed Data Processing Agreement establishing terms for personal data processing between controller and processor, ensuring compliance with Indian data protection regulations.
Download
Third Party Processor Agreement
An Indian law-governed agreement establishing terms for third-party processing of personal data, ensuring compliance with Indian data protection regulations.
Download
Personal Data Collection Agreement
An India-compliant Personal Data Collection Agreement governing the collection and processing of personal data under Indian data protection laws.
Download
International Data Protection Agreement
An Indian law-governed agreement regulating international personal data transfers and processing, ensuring compliance with India's data protection regulations.
Download
Processor To Processor DPA
An Indian law-compliant Data Processing Agreement between two processors, governing personal data processing activities and security measures under the Digital Personal Data Protection Act 2023.
Download
Master Data Protection Agreement
An Indian law-governed agreement establishing data processing obligations between controller and processor under DPDP Act 2023.
Download
Intra Group Data Transfer Agreement
A comprehensive agreement governing intra-group data transfers in India, ensuring compliance with Indian data protection laws and establishing data handling protocols between group entities.
Download
Data Management Agreement
An Indian law-governed agreement establishing terms for data management and processing between organizations, ensuring compliance with Indian data protection regulations.
Download
Data Controller To Data Controller Agreement
An Indian law-governed agreement establishing terms for personal data sharing between two independent data controllers, ensuring compliance with Indian data protection regulations.
Download
Commissioned Data Processing Agreement
An Indian law-governed agreement establishing terms for commissioned data processing, ensuring compliance with Indian data protection regulations.
Download
Intercompany Data Processing Agreement
An Indian law-governed agreement regulating intra-group personal data processing activities, ensuring compliance with Indian data protection regulations.
Download
DPA Agreement
An Indian law-compliant agreement governing the processing of personal data between a controller and processor, ensuring compliance with the Digital Personal Data Protection Act, 2023.
Download
Third Party Data Processing Agreement
An Indian law-governed agreement regulating third-party personal data processing activities, ensuring compliance with India's data protection regulations.
Download
Data Transfer Addendum
A legal addendum governing data transfers under Indian law, ensuring compliance with the DPDP Act 2023 and establishing data protection requirements between parties.
Download
Supplier Data Processing Agreement
An India-compliant data processing agreement governing the processing of personal data by suppliers, aligned with the DPDP Act 2023 and related regulations.
Download
Personal Data Transfer Agreement
A legally binding agreement for personal data transfer between organizations, compliant with Indian data protection laws and regulations.
Download
Personal Data Protection Agreement
Indian law-compliant Personal Data Protection Agreement governing the processing of personal data between parties under DPDP Act 2023.
Download
Order Processing Agreement
An Indian law-governed agreement establishing terms for order processing services between a service provider and business client.
Download
Data Protection Agreement For Employees
An India-compliant agreement governing the protection and processing of employee personal data under Indian data protection laws.
Download
Affiliate Addendum
An India-compliant addendum governing affiliate marketing relationships, specifying commission structures and regulatory compliance requirements under Indian law.
Download
Data Privacy Addendum
An Indian law-compliant addendum governing personal data processing and protection obligations between contracting parties.
Download
Sub Processing Agreement
An Indian law-compliant agreement governing data handling between a processor and sub-processor, ensuring adherence to Indian data protection regulations.
Download
International Data Transfer Agreement
An Indian law-governed agreement for secure and compliant international transfer of personal data, ensuring adherence to the Digital Personal Data Protection Act, 2023.
Download
Data Protection Addendum
A legal document under Indian law that sets out data protection obligations and requirements between parties handling personal data, ensuring compliance with the DPDP Act 2023.
Download
骋别苍颈别鈥檚 Security Promise
Genie is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; 骋别苍颈别鈥檚 AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it
.png)