Controller To Controller Agreement Gdpr Template for United States

1. International Data Transfers: Required when personal data is transferred outside the EEA, including transfer mechanisms and safeguards

2. Sub-processing: Include when either controller may engage sub-processors for data processing activities

3. Audit Rights: Optional section detailing audit procedures when regular compliance verification is required

4. Insurance: Include when specific insurance coverage for data protection is required

5. Data Protection Impact Assessment: Required when processing is likely to result in high risk to individuals

6. Joint Controller Provisions: Include when parties are acting as joint controllers for certain processing activities

7. US State Privacy Law Compliance: Include when processing involves data subjects from specific US states with privacy laws

1. Schedule 1 - Details of Processing: Detailed description of data processing activities, categories of data subjects and personal data

2. Schedule 2 - Technical and Organizational Measures: Specific security measures implemented by both controllers

3. Schedule 3 - Transfer Mechanisms: Details of international transfer mechanisms including SCCs if applicable

4. Schedule 4 - Contact Points: Key contacts for operational matters, data protection officers, and breach notification

5. Schedule 5 - Sub-processors: List of approved sub-processors and process for adding new ones

6. Appendix A - Data Subject Rights Procedure: Detailed procedures for handling data subject requests

7. Appendix B - Breach Response Plan: Detailed procedures for responding to and managing data breaches