Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Data Addendum
"I need a Data Addendum for our new cloud service provider based in the US, to be effective from January 2025, that covers international data transfers and includes specific security requirements for handling customer data from our Irish operations."
1. Parties: Identification of the parties and their roles (data controller, data processor, or joint controllers)
2. Background: Context of the addendum, reference to the main agreement, and purpose of data processing activities
3. Definitions: Key terms used in the addendum, aligned with GDPR definitions and any additional specific terms
4. Scope and Purpose: Detailed description of the data processing activities covered by the addendum
5. Data Protection Obligations: Core obligations of both parties under GDPR and Irish data protection law
6. Technical and Organizational Measures: Security measures required to ensure appropriate level of data protection
7. Sub-processing: Conditions and requirements for engaging sub-processors
8. Data Subject Rights: Procedures for handling data subject requests and ensuring compliance with GDPR rights
9. Data Breach Notification: Procedures and timeframes for reporting and handling data breaches
10. Audit Rights: Controller's right to audit and processor's obligation to demonstrate compliance
11. Term and Termination: Duration of the addendum and obligations upon termination
12. Return or Deletion of Data: Requirements for handling personal data after service completion or termination
13. Governing Law and Jurisdiction: Confirmation of Irish law application and jurisdiction
1. International Data Transfers: Required when personal data will be transferred outside the EEA, including transfer mechanisms and safeguards
2. Special Categories of Data: Additional requirements when processing sensitive personal data under Article 9 GDPR
3. Joint Controller Arrangements: Required when parties are acting as joint controllers, detailing shared responsibilities
4. Data Protection Impact Assessment: Procedures for conducting DPIAs when required by the processing activities
5. Records of Processing: Specific requirements for maintaining processing records beyond standard GDPR requirements
6. Processor Personnel: Specific requirements for staff training, confidentiality, and access controls
7. Insurance Requirements: Specific insurance obligations related to data protection risks
1. Schedule 1 - Processing Activities: Detailed description of processing activities including categories of data subjects, types of personal data, and processing purposes
2. Schedule 2 - Technical and Organizational Measures: Detailed security measures implemented to protect personal data
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Transfer Mechanisms: Standard Contractual Clauses or other transfer mechanisms for international transfers
5. Schedule 5 - Data Breach Response Plan: Detailed procedures and contact information for data breach response
6. Appendix A - Contact Details: Key contacts for data protection matters, including Data Protection Officers if appointed
7. Appendix B - Security Incident Report Form: Template for reporting security incidents and data breaches
Authors
Applicable Data Protection Laws
Authorized Personnel
Confidential Information
Controller
Data Protection Impact Assessment
Data Protection Laws
Data Subject
Data Subject Request
EEA
EU
GDPR
Irish Data Protection Act
Personal Data
Personal Data Breach
Processing
Processor
Restricted Transfer
Security Incident
Services
Special Categories of Personal Data
Standard Contractual Clauses
Sub-processor
Supervisory Authority
Technical and Organizational Measures
Third Country
Transfer Mechanism
Transfer Impact Assessment
DPC
Joint Controller
Records of Processing
Data Protection Officer
Cross-border Processing
Binding Corporate Rules
Data Minimization
Privacy by Design
Privacy by Default
Data Protection Fee
Appropriate Technical Measures
Appropriate Organizational Measures
Scope
Data Protection Compliance
Processing Obligations
Data Security
Confidentiality
Sub-processing
International Transfers
Audit Rights
Data Subject Rights
Breach Notification
Liability
Indemnification
Insurance
Term and Termination
Data Return and Deletion
Assignment
Severability
Variation
Notices
Governing Law
Jurisdiction
Precedence
Force Majeure
Third Party Rights
Entire Agreement
Cooperation
Regulatory Compliance
Record Keeping
Personnel Obligations
Technology
Financial Services
Healthcare
E-commerce
Telecommunications
Professional Services
Cloud Computing
Software Development
Digital Marketing
Education
Insurance
Banking
Consulting
Retail
Manufacturing
Pharmaceutical
Legal
Compliance
Information Technology
Information Security
Privacy
Risk Management
Procurement
Operations
Commercial
Data Protection
Information Governance
Vendor Management
Contract Management
Data Protection Officer
Privacy Counsel
Legal Counsel
Compliance Manager
Information Security Manager
IT Director
Chief Technology Officer
Chief Information Security Officer
Privacy Manager
Contract Manager
Procurement Manager
Risk Manager
Commercial Director
Operations Director
General Counsel
Chief Legal Officer
Data Protection Specialist
Information Governance Manager
Find the exact document you need
Gdpr Intercompany Agreement
Irish law-governed GDPR Intercompany Agreement for regulating personal data transfers and processing between group companies under Irish and EU data protection requirements.
Sub Processor Agreement
An Irish law-governed agreement establishing terms for delegated data processing activities between a processor and sub-processor, ensuring GDPR compliance.
Data Processing Agreement Addendum
An Irish law-governed addendum establishing GDPR-compliant terms for data processing activities between controllers and processors.
Third Party Processing Agreement
An Irish law-governed agreement establishing terms for third-party processing of personal data in compliance with GDPR and local data protection requirements.
Data Processing Contract
An Irish law-governed agreement establishing terms for personal data processing activities between a Data Controller and Data Processor, ensuring GDPR compliance.
Data Processing Addendum
An Irish law-governed Data Processing Addendum that establishes GDPR-compliant terms for personal data processing between controllers and processors.
Data Addendum
An Irish law-governed Data Addendum establishing GDPR-compliant data processing terms between controllers and processors.
Controller To Controller Agreement GDPR
Irish law Controller to Controller Agreement establishing GDPR-compliant data sharing framework between independent data controllers.
Data Sharing Agreement Controller To Processor
An Irish law-governed agreement establishing terms for personal data processing between a Controller and Processor, ensuring GDPR compliance.
Third Party Data Processing Agreement
An Irish law-governed Data Processing Agreement establishing GDPR-compliant terms between a data controller and processor.
Data Transfer Addendum
An Irish law-governed addendum that establishes compliant mechanisms for international personal data transfers under GDPR and Irish data protection laws.
Controller Processor Agreement
An Irish law-governed agreement establishing terms for processing personal data under GDPR, between a data controller and processor.
Order Processing Agreement
An Irish law-governed agreement establishing terms for order processing services, ensuring GDPR compliance and data protection requirements.
Data Protection Agreement For Employees
An Irish law-governed agreement establishing data protection protocols between employer and employee, ensuring GDPR compliance and proper handling of employee personal data.
Sub Processing Agreement
An Irish law-governed agreement between a data processor and sub-processor establishing terms for personal data processing in compliance with GDPR and Irish data protection legislation.
International Data Transfer Agreement
Irish law-governed agreement for compliant transfer of personal data from Ireland/EU to non-EEA countries, ensuring GDPR and local law compliance.
Data Transfer Agreement
An Irish law-governed agreement establishing terms for compliant transfer of personal data between organizations under GDPR and Irish data protection legislation.
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.