Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
International Data Protection Agreement
"I need an International Data Protection Agreement for my Indian IT company that will be transferring customer support data to our new processing center in Singapore, starting March 2025; the agreement should include specific provisions for handling financial data and customer service recordings."
1. Parties: Identification of the data exporter and data importer, including their roles (controller/processor)
2. Background: Context of the agreement, relationship between parties, and purpose of data processing
3. Definitions: Detailed definitions of terms used, including 'personal data', 'processing', 'data subject', etc.
4. Scope and Purpose: Scope of data processing activities and permitted purposes
5. Obligations of Data Exporter: Responsibilities of the party transferring data, including compliance with local laws
6. Obligations of Data Importer: Responsibilities of the receiving party, including security measures and processing limitations
7. Data Subject Rights: Procedures for handling data subject requests and ensuring rights under DPDP Act
8. Security Measures: Technical and organizational security measures required for data protection
9. Data Breach Notification: Procedures and timelines for reporting and handling data breaches
10. Sub-processing: Conditions and requirements for engaging sub-processors
11. Audit Rights: Provisions for monitoring and verifying compliance
12. Term and Termination: Duration of agreement and termination conditions
13. Return or Deletion of Data: Obligations regarding data handling upon contract termination
14. Liability and Indemnification: Allocation of risks and responsibilities
15. Governing Law and Jurisdiction: Specification of Indian law as governing law and jurisdiction for disputes
1. Data Localization Requirements: Specific provisions for sectors requiring data localization (e.g., financial data as per RBI guidelines)
2. Cross-Border Transfer Mechanisms: Additional safeguards for transfers to specific jurisdictions
3. Industry-Specific Compliance: Additional requirements for specific sectors (healthcare, financial services, etc.)
4. Joint Controller Provisions: Required when both parties act as joint controllers
5. Insurance Requirements: Specific insurance obligations for data protection
6. Force Majeure: Provisions for handling unforeseen circumstances affecting data protection obligations
7. Alternative Dispute Resolution: Mediation or arbitration procedures for data protection disputes
1. Schedule 1 - Details of Processing: Detailed description of data processing activities, categories of data, purposes, etc.
2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented
3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities
4. Schedule 4 - Transfer Impact Assessment: Assessment of risks and safeguards for international transfers
5. Schedule 5 - Data Subject Request Procedure: Detailed procedures for handling data subject rights requests
6. Appendix A - Contact Points: Key contacts for data protection matters, breach notification, and escalation
7. Appendix B - Standard Contractual Clauses: If applicable, modified standard contractual clauses aligned with Indian law
Authors
Applicable Data Protection Laws
Authorized Personnel
Breach Notification
Business Purpose
Consent
Controller
Cross-border Transfer
Data Breach
Data Exporter
Data Importer
Data Principal
Data Processing
Data Protection Impact Assessment
Data Protection Laws
Data Protection Officer
Data Subject Rights
Digital Personal Data
Digital Personal Data Protection Act 2023
Effective Date
Force Majeure Event
Government Authority
Group Company
Information Security Incident
International Transfer
Notice
Personal Data
Personal Data Breach
Processing
Processor
Regulatory Authority
Representative
Security Measures
Sensitive Personal Data
Services
Sub-processor
Technical and Organizational Measures
Term
Third Party
Transfer Impact Assessment
Scope
Data Processing
Data Transfer
Confidentiality
Security
Compliance
Audit Rights
Sub-processing
Data Subject Rights
Breach Notification
Liability
Indemnification
Insurance
Term and Termination
Governing Law
Dispute Resolution
Force Majeure
Assignment
Notices
Severability
Entire Agreement
Amendments
Representations and Warranties
Data Localization
Cross-border Transfer
Regulatory Compliance
Technical Requirements
Operational Controls
Emergency Measures
Information Technology
Healthcare
Financial Services
E-commerce
Telecommunications
Business Process Outsourcing
Manufacturing
Professional Services
Education
Research and Development
Pharmaceutical
Insurance
Digital Marketing
Retail
Human Resources Services
Legal
Compliance
Information Security
IT
Risk Management
Operations
Privacy
Procurement
Vendor Management
Corporate Affairs
Data Governance
Information Management
International Operations
Regulatory Affairs
Chief Privacy Officer
Data Protection Officer
Chief Information Security Officer
Legal Counsel
Compliance Manager
IT Director
Privacy Manager
Information Security Manager
Risk Manager
Operations Director
Chief Technology Officer
General Counsel
Procurement Manager
Vendor Management Lead
Corporate Affairs Director
Find the exact document you need
Third Party Processing Agreement
An Indian law-governed agreement establishing terms for third-party processing of personal and sensitive data, ensuring compliance with IT Act and Rules.
Controller To Controller Agreement
An Indian law-governed agreement establishing terms for personal data sharing between independent data controllers, ensuring compliance with DPDP Act 2023.
Product Development Non Disclosure Agreement
An Indian law-compliant Non-Disclosure Agreement for protecting confidential information during product development activities and collaborations.
Joint Controller Data Processing Agreement
An Indian law-compliant agreement establishing roles and responsibilities between joint controllers for personal data processing activities.
Standard Data Processing Agreement
Indian-law compliant Data Processing Agreement governing the processing of personal data between controllers and processors, aligned with IT Act and DPDP Act requirements.
Dpia Agreement
An Indian law-governed agreement documenting the systematic assessment of data processing risks and protection measures under the Digital Personal Data Protection Act 2023.
Data Agreement
An Indian law-governed Data Agreement establishing terms for data sharing and processing, compliant with Indian data protection regulations.
Data Addendum
An Indian law-governed document that sets out data processing terms and compliance requirements under Indian data protection legislation.
Controller Processor Contract
An Indian law-compliant agreement governing the processing of personal data between a controller and processor under the Digital Personal Data Protection Act 2023.
DPA Contract
An Indian law-governed Data Processing Agreement establishing terms for personal data processing between controller and processor, ensuring compliance with Indian data protection regulations.
Third Party Processor Agreement
An Indian law-governed agreement establishing terms for third-party processing of personal data, ensuring compliance with Indian data protection regulations.
Personal Data Collection Agreement
An India-compliant Personal Data Collection Agreement governing the collection and processing of personal data under Indian data protection laws.
International Data Protection Agreement
An Indian law-governed agreement regulating international personal data transfers and processing, ensuring compliance with India's data protection regulations.
Processor To Processor DPA
An Indian law-compliant Data Processing Agreement between two processors, governing personal data processing activities and security measures under the Digital Personal Data Protection Act 2023.
Master Data Protection Agreement
An Indian law-governed agreement establishing data processing obligations between controller and processor under DPDP Act 2023.
Intra Group Data Transfer Agreement
A comprehensive agreement governing intra-group data transfers in India, ensuring compliance with Indian data protection laws and establishing data handling protocols between group entities.
Data Management Agreement
An Indian law-governed agreement establishing terms for data management and processing between organizations, ensuring compliance with Indian data protection regulations.
Data Controller To Data Controller Agreement
An Indian law-governed agreement establishing terms for personal data sharing between two independent data controllers, ensuring compliance with Indian data protection regulations.
Commissioned Data Processing Agreement
An Indian law-governed agreement establishing terms for commissioned data processing, ensuring compliance with Indian data protection regulations.
Intercompany Data Processing Agreement
An Indian law-governed agreement regulating intra-group personal data processing activities, ensuring compliance with Indian data protection regulations.
DPA Agreement
An Indian law-compliant agreement governing the processing of personal data between a controller and processor, ensuring compliance with the Digital Personal Data Protection Act, 2023.
Third Party Data Processing Agreement
An Indian law-governed agreement regulating third-party personal data processing activities, ensuring compliance with India's data protection regulations.
Data Transfer Addendum
A legal addendum governing data transfers under Indian law, ensuring compliance with the DPDP Act 2023 and establishing data protection requirements between parties.
Supplier Data Processing Agreement
An India-compliant data processing agreement governing the processing of personal data by suppliers, aligned with the DPDP Act 2023 and related regulations.
Personal Data Transfer Agreement
A legally binding agreement for personal data transfer between organizations, compliant with Indian data protection laws and regulations.
Personal Data Protection Agreement
Indian law-compliant Personal Data Protection Agreement governing the processing of personal data between parties under DPDP Act 2023.
Order Processing Agreement
An Indian law-governed agreement establishing terms for order processing services between a service provider and business client.
Data Protection Agreement For Employees
An India-compliant agreement governing the protection and processing of employee personal data under Indian data protection laws.
Affiliate Addendum
An India-compliant addendum governing affiliate marketing relationships, specifying commission structures and regulatory compliance requirements under Indian law.
Data Privacy Addendum
An Indian law-compliant addendum governing personal data processing and protection obligations between contracting parties.
Sub Processing Agreement
An Indian law-compliant agreement governing data handling between a processor and sub-processor, ensuring adherence to Indian data protection regulations.
International Data Transfer Agreement
An Indian law-governed agreement for secure and compliant international transfer of personal data, ensuring adherence to the Digital Personal Data Protection Act, 2023.
Data Protection Addendum
A legal document under Indian law that sets out data protection obligations and requirements between parties handling personal data, ensuring compliance with the DPDP Act 2023.
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.