First customers · Template 12 of 40

Data Processing Agreement

Use it when you handle personal data on behalf of a customer (or a supplier handles yours).

  • About 4 pages
  • 13 drafting notes in the margin
  • 10 clauses
  • Word (.docx)
  • England and Wales
  • Updated November 2026

What is in it

  1. Definitions
  2. Roles and instructions
  3. Processor’s obligations
  4. Personal Data Breaches
  5. Sub-processors
  6. International transfers
  7. Audit and information
  8. Return and deletion
  9. Liability
  10. Term and general

Plus a schedule of the commercial details and signature blocks where the document needs them.

Read the opening

The first part of the template, as it reads in Word. Blanks are shown as lines; the drafting notes sit in the margin of the file.

DATA PROCESSING AGREEMENT

This Data Processing Agreement (the “DPA”) is made on ____________________ between:

(1) ____________________ LTD, a company registered in England and Wales (registration number ____________) whose registered office is at ______________________________________________ (the “Controller”); and

(2) ____________________ LTD, a company registered in England and Wales (registration number ____________) whose registered office is at ______________________________________________ (the “Processor”).

Background

(A) The Controller and the Processor have entered into an agreement dated ____________________ (the “Main Agreement”) under which the Processor provides services to the Controller (the “Services”).

(B) In providing the Services the Processor processes personal data on the Controller’s behalf, and the parties wish to record their obligations under the Data Protection Legislation.

1. Definitions

“Data Protection Legislation”: the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and any other applicable law relating to the processing of personal data, in each case as amended or replaced.

“Controller, Processor, Data Subject, Personal Data, Personal Data Breach, Processing and Supervisory Authority”: have the meanings given in the Data Protection Legislation.

How it works

  1. Pay by card. The download starts at once and the link keeps working.
  2. Open the Word file. Fill in the blanks, pick the options marked with boxes, read each note in the margin.
  3. Delete the notes and the notice box, then sign. Or send it to us for a fixed-fee check first.

Word template

£39 Instant download

One-off. No account needed. No VAT to add. Stripe emails a receipt you can use as an invoice.

Or fill it in online (platform plan)
  • Drafted by a solicitor for England and Wales
  • Drafting notes explain every choice
  • Instant download, link works again later
  • Last updated November 2026
  • £50 off a fixed-fee review once filled in (from £99)

Part of a pack

SaaS launch pack, £99

7 documents for putting a product in front of paying customers.

See the pack

Need more than one?

Complete template library, £299

All 40 documents, with the index and guide.