Back to DPDPA Glossary Index
Section 8(2); contractual practiceGovernance & Roles
Data Protection Agreement (DPA)
A data protection or processing agreement records responsibilities for processing personal data on another organisation's behalf.
Meaning and legal context
DPDP refers to a valid contract for processor engagement, without a universally named DPA or prescribed model clauses. Terms must reflect the actual services, data and applicable law.
Practical application
Complete a processing schedule covering purposes, access, safeguards and deletion.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.