Data Processing Agreement Evaluation Checklist
Use this checklist to review whether a data processing agreement is complete and ready for operational use.
Agreement Title and Reference Number
*
List all parties to the agreement
*
Describe the scope of data processing activities covered
*
Categories of personal data processed (select all that apply)
*
Contact information
Financial data
Employee data
Customer data
Other
Are security measures and safeguards documented and appropriate?
*
Yes
No
Requires Review
Are subprocessors identified and contractually covered?
*
All subprocessors identified and covered
Some subprocessors identified/covered
No subprocessors
Requires Review
Specify data retention period and deletion procedures
*
Are cross-border data transfers addressed and compliant?
*
Yes
No
Not Applicable
Are data subject rights (access, rectification, erasure, etc.) addressed?
*
Yes
No
Requires Review
Final approval status
*
Approved
Approved with conditions
Not approved
Submit Evaluation
Should be Empty: