Multi-Jurisdiction Data Processing Agreement (DPA) — GDPR / UK GDPR / CCPA / CPRA / PIPL / DPDP (Editable Word)
One data processing agreement that flexes across every market you operate in — Europe, the US, China, and India — instead of maintaining a separate DPA per regime. A common core of processor obligations, with jurisdiction modules you switch on or off.
Regimes covered: EU & UK GDPR (Art. 28 + SCCs / UK Addendum) · CCPA/CPRA and comparable US state laws · China PIPL (entrusted processing, cross-border transfer, localization) · India DPDP Act 2023. Delete any module you don't need.
What's inside (fully editable):
- Agreement Terms (15 clauses) — processing on instructions, confidentiality, security, sub-processing, assistance with rights & assessments, breach notification, deletion/return, audits, international transfers, liability, and term.
- Module A — EU / UK GDPR — Article 28(3) mapping, EU SCCs (2021/914) module selection, and the UK Addendum / IDTA.
- Module B — California & US state — CCPA/CPRA service-provider & contractor certifications, the four core restrictions, and flow-down.
- Module C — China PIPL — entrusted-processing terms, separate consent, cross-border mechanism (CAC assessment / certification / Standard Contract), localization, and local representative.
- Module D — India DPDP — data-processor obligations, breach intimation, and erasure.
- 5 annexes — processing details, technical & organizational security measures, sub-processors, a cross-border transfer-mechanism selection matrix, and contacts/representatives — plus dual signature blocks.
Built to sign, not to rewrite: every field is a marked [BRACKETED PLACEHOLDER], an order-of-precedence clause keeps incorporated SCCs and the China Standard Contract controlling, and the annexes double as your SCC annexes.
Format & compatibility: Microsoft Word (.docx) — works in Word, Google Docs, and LibreOffice. Live table of contents. Attach as a schedule to your MSA or execute standalone.
Licensed template. Customize before execution. Not legal advice — have qualified counsel review before signing.