Data Sharing Agreement Controller To Processor Template for Switzerland

1. Cross-border Data Transfers: Required when personal data will be transferred outside Switzerland, specifying transfer mechanisms and safeguards

2. Special Categories of Data: Required when processing sensitive personal data, specifying additional safeguards and requirements

3. Insurance Requirements: Specific insurance obligations for either party, typically included for high-risk processing activities

4. Business Continuity: Required for critical processing activities, specifying disaster recovery and business continuity requirements

5. Joint Controllers: Required when there are multiple controllers involved in determining processing purposes

6. Data Protection Impact Assessment: Required for high-risk processing activities, outlining DPIA requirements and cooperation

7. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, financial services)

1. Schedule 1 - Processing Details: Detailed description of processing activities, including data categories, purposes, and duration

2. Schedule 2 - Technical and Organizational Measures: Detailed specification of security measures implemented by the processor

3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for any cross-border data transfers

5. Schedule 5 - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches

6. Schedule 6 - Data Return/Deletion Procedures: Specific procedures for returning or deleting data

7. Schedule 7 - Audit Procedures: Detailed procedures for conducting compliance audits

8. Appendix A - Contact Details: Key contacts for both parties including DPO details if applicable

9. Appendix B - Standard Forms: Templates for routine communications such as sub-processor notifications or breach reports