DPA · Sample analysis
DPA: EU Standard Contractual Clauses (Art. 28 GDPR)
EU Commission Implementing Decision 2021/915 — Standard Contractual Clauses between controllers and processors under GDPR Article 28. Sourced from EUR-Lex. Run perspective: party_a (Controller).
OnePager — Statute / Regulation / Public Legal Text
Not legal advice. This analysis was generated by IntelLegal, an automated document-review assistant. It summarizes what the document appears to say, highlights terms that are unusual or potentially risky, and notes items a reviewer may want to check. It is not a substitute for advice from a licensed attorney, and no attorney–client relationship is created. Verify all findings against the source document before relying on them.
Document type: Statute / Regulation / Public Legal Text | Parties: COMMISSION IMPLEMENTING DECISION, Regulation, Council, EC | Governing law: not stated Perspective: Risk read from Controller (the data controller)'s perspective. | Grounding: 0.97
Top flags
- No characteristic red-flag patterns matched.
Key obligations
- That contract or act shall be in writing, including in electronic form. (The European Commission,)
- In this case, the processor shall inform the controller of that legal requirement before processing, unless the law prohibits this on important grounds of publi (§a)
- These instructions shall always be documented. (§a)
- Purpose limitation The processor shall process the personal data only for the specific purpose(s) of the processing, as set out in Annex II, unless it receives (§7.2)
- The Parties shall keep Annex IV up to date. (§a)
Bottom line
0 higher-severity item(s) to review; 0 expected clause(s) flagged as possibly missing.