Intra Group Agreement Data Protection Template for India

1. International Data Transfers: Required when personal data will be transferred outside India, specifying compliance with data localization requirements

2. Industry-Specific Requirements: Include when parties operate in regulated sectors like banking or healthcare

3. Sub-processing: Required when any party intends to use sub-processors for data processing activities

4. Joint Controller Arrangements: Include when multiple entities jointly determine processing purposes

5. Data Protection Impact Assessments: Required for high-risk processing activities

6. Special Categories of Data: Include when sensitive personal data is being processed

7. Technology-Specific Provisions: Required when specific technologies or platforms are used for data processing

1. Schedule 1 - Data Processing Activities: Detailed description of processing activities, categories of data subjects and personal data

2. Schedule 2 - Technical and Organizational Measures: Specific security measures and controls implemented by each party

3. Schedule 3 - Data Transfer Map: Map of data flows between group entities and processing locations

4. Schedule 4 - Contact Points: List of key contacts for data protection matters at each entity

5. Schedule 5 - Sub-processors: List of approved sub-processors and their processing activities

6. Appendix A - Security Breach Response Plan: Detailed procedures for managing and reporting data breaches

7. Appendix B - Data Subject Rights Procedure: Detailed procedures for handling data subject requests