7. Documenting your Data Processing Agreements

A new object in QualiWare is the Data Processing Agreement. This object, which is linked to from the business process, can reflect an agreement between your organization and an external processor, or your organization and a data subject.

The Data Processing Agreement can be created from QLM or from the collaboration platform. Below, you can see how the template looks when accessing it from the collaboration platform:

 

The Data Processing Agreement describes the purpose of processing and contains information about the controller, the processor and the recipient. It is possible to link a document to the agreement – such as for example a contract. You can link to the processor, recipients, the data and processes it concerns, and the Data Protection Officer of the Processor:

 

The Data Processing Agreement can also contain information about whether the data is sent to other countries and a description of security measures.

You can get an overview of your Data Processing Agreements in a dedicated QRV showing what processes it is linked to, who is responsible for it and what its status is: