tiktok成人版

Intra Group Data Processing Agreement Template for New Zealand

A comprehensive agreement governed by New Zealand law that regulates the processing of personal data between entities within the same corporate group. This document ensures compliance with the New Zealand Privacy Act 2020 and establishes clear protocols for data handling, security measures, and privacy protection within group companies. It defines the roles and responsibilities of different group entities in relation to data processing activities, including specifications for data transfer, security requirements, breach notification procedures, and audit rights.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Get template free

Your data doesn't train Genie's AI

You keep IP ownership聽of your docs

4.6 / 5
4.6 / 5
4.8 / 5

What is a Intra Group Data Processing Agreement?

The Intra Group Data Processing Agreement is essential for corporate groups operating in New Zealand that share and process personal data between different entities within their organization. This document becomes necessary when one group entity processes personal data on behalf of another group entity, ensuring compliance with the New Zealand Privacy Act 2020 and establishing clear accountability and data protection standards. It is particularly important for multinational organizations with New Zealand operations or New Zealand-based companies with multiple subsidiaries, as it helps maintain consistent data protection practices across the group while meeting local regulatory requirements. The agreement covers crucial aspects such as data security measures, breach notification procedures, audit rights, and cross-border data transfer mechanisms within the group structure.

What sections should be included in a Intra Group Data Processing Agreement?

1. Parties: Identification of the group companies entering into the agreement, including their registration details and roles (controller/processor)

2. Background: Context of the agreement, relationship between the parties, and purpose of the data processing arrangement

3. Definitions: Key terms used in the agreement, including specific privacy and data protection terminology

4. Scope and Purpose: Details of the data processing activities covered, including types of data, purposes, and processing operations

5. Obligations of the Data Controller: Responsibilities of the controlling entity, including providing instructions and ensuring legal basis for processing

6. Obligations of the Data Processor: Detailed processor obligations including security measures, confidentiality, and processing limitations

7. Sub-processing: Conditions and requirements for engaging other group entities as sub-processors

8. Data Security: Technical and organizational security measures required to protect the processed data

9. Data Breach Notification: Procedures for handling and reporting data breaches within the group

10. Audit Rights: Rights and procedures for conducting audits and inspections

11. Term and Termination: Duration of the agreement and termination provisions

12. Data Return and Deletion: Obligations regarding data handling upon termination

13. Governing Law and Jurisdiction: Specification of New Zealand law as governing law and jurisdiction for disputes

What sections are optional to include in a Intra Group Data Processing Agreement?

1. Cross-Border Data Transfers: Required when data will be transferred outside New Zealand, specifying transfer mechanisms and safeguards

2. Special Categories of Data: Include when processing sensitive personal information as defined in the Privacy Act 2020

3. Group Data Protection Standards: Include when implementing specific group-wide data protection policies and standards

4. Business Continuity: Include when specific business continuity and disaster recovery requirements are needed

5. Insurance Requirements: Include when specific insurance coverage for data processing activities is required

6. Costs and Charges: Include when there are specific cost allocations for data processing services between group entities

What schedules should be included in a Intra Group Data Processing Agreement?

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including data types, purposes, and duration

2. Schedule 2 - Technical and Organizational Measures: Specific security measures and controls implemented to protect data

3. Schedule 3 - Approved Sub-processors: List of approved group entities that may act as sub-processors

4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for international data transfers within the group

5. Schedule 5 - Data Breach Response Plan: Detailed procedures for handling data breaches and required notifications

6. Appendix A - Contact Details: Key contacts for data protection matters at each group entity

7. Appendix B - Standard Contractual Clauses: If required for international transfers, modified to reflect intra-group relationship

Authors

Alex Denne

Head of Growth (Open Source Law) @ tiktok成人版 | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents

Jurisdiction

New Zealand

Cost

Free to use

Find the exact document you need

Intra Group Data Processing Agreement

A New Zealand law-governed agreement regulating intra-group personal data processing activities and ensuring Privacy Act 2020 compliance within corporate groups.

Download

Pre Negotiation Agreement

A New Zealand law-governed agreement establishing terms for preliminary business negotiations, including confidentiality and non-binding provisions.

Download

Product Development Non Disclosure Agreement

A New Zealand-law governed agreement protecting confidential information shared during product development activities.

Download

Joint Controller Agreement

A New Zealand law-governed agreement establishing responsibilities and obligations between organizations that jointly control and process personal data under the Privacy Act 2020.

Download

Data Processing Addendum

A New Zealand-compliant legal agreement governing the processing of personal information between a data controller and data processor under the Privacy Act 2020.

Download

Data Agreement

A New Zealand-compliant agreement governing the terms and conditions for data handling between parties, ensuring alignment with local privacy laws and regulations.

Download

Subprocessor Agreement

A New Zealand law-governed agreement that regulates the relationship between a data processor and subprocessor for handling personal data processing activities.

Download

DPA Contract

A New Zealand-compliant Data Processing Agreement governing personal data handling between controllers and processors under NZ Privacy Act 2020.

Download

Controller To Controller Data Processing Agreement

A New Zealand-compliant agreement governing personal data sharing between two independent data controllers, ensuring adherence to the Privacy Act 2020.

Download

DPA Agreement

A New Zealand-compliant agreement governing the processing of personal data between a controller and processor, ensuring adherence to the Privacy Act 2020.

Download

Data Transfer Addendum

A New Zealand law-compliant addendum governing cross-border personal data transfers under the Privacy Act 2020, establishing security measures and compliance requirements.

Download

International Data Transfer Agreement

A New Zealand law-governed agreement establishing requirements and safeguards for international transfer of personal and business data, ensuring compliance with NZ Privacy Act 2020.

Download

Data Protection Addendum

A legal document under New Zealand law that establishes data protection obligations and privacy compliance requirements between parties processing personal information.

Download
See more related templates

骋别苍颈别鈥檚 Security Promise

Genie is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; 骋别苍颈别鈥檚 AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it