Draft a data-processing agreement from the processing facts
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- Produce a first-draft DPA covering instructions, security, subprocessors, deletion and audit from the processing description and the client's precedent.
- What the lawyer must review
- Match the DPA to the actual processing
- Check controller and processor labels; they are easy to get backwards
- Written for / version
- US
Open a jurisdiction version of this task to see which instruments apply: US
Who does what
| Role | What they do |
|---|---|
| Assistance | Produce a first-draft DPA covering instructions, security, subprocessors, deletion and audit from the processing description and the client's precedent. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Verify every relied-on citation, figure and name against the source document.
- The responsible lawyer approves the exact version before use.
Sources
Confirm the required checking with the responsible lawyer before work starts. The checking approach does not establish permission to use AI.