Managing Data Processing Agreements with Third Parties

An applied course in data processing agreements built around the decisions practitioners actually face.

📍 Tripoli🗓️ 5 training days📚 4 modules🎓 Accredited certificate
5intensive training days
4scientific modules
8training sessions
32detailed points

Course Overview

The cost of getting data processing agreements wrong is rarely the judgment; it is the years spent reaching it. The commercial risk in this strand of legal and contractual practice usually sits in clauses nobody reads until something fails. It is written for people who have to make the practice within legal and contractual practice work with the resources they already have. The programme takes participants through data processing agreements end to end, from framing the problem to closing it out. Work is grounded in real cases drawn from this part of legal and contractual practice, which each participant adapts to conditions in their own organisation. Improvement in the legal and contractual practice capability stalls when it depends on one capable individual rather than a defined method. The programme builds the judgement to know which parts of data processing agreements to standardise and which to leave flexible. Comparative studies of the practice within legal and contractual practice across sectors find the same handful of failure points recurring. The final session converts the week's work on this aspect of legal and contractual practice into commitments with owners and dates.

Expected Learning Outcomes

01

Prepare the evidential record supporting decisions taken under data processing agreements.

02

Plan the handover of data processing agreements so that capability is not lost when key staff move on.

03

Draft provisions on data processing agreements that allocate risk deliberately rather than by default.

04

Prepare and defend claims arising under data processing agreements with contemporaneous evidence.

05

Manage variations and change to data processing agreements without losing contractual position.

06

Adapt recognised practice on data processing agreements to local constraints without hollowing it out.

07

Integrate data processing agreements into existing management routines rather than running it separately.

Who Should Attend

01

Risk managers assessing legal exposure from data processing agreements.

02

Contract managers and administrators responsible for data processing agreements.

03

Company secretaries and governance officers overseeing data processing agreements.

04

Compliance officers assessing obligations under data processing agreements.

05

Procurement and contracting staff whose agreements set obligations around data processing agreements.

06

Risk managers assessing the exposure created by data processing agreements.

Course Modules

01

Data processing agreements: notices, records and time bars

2 sessions · 8 points

Session 1Building the contemporaneous record supporting data processing agreements

  • Confirm that contractual obligations around data processing agreements are understood.
  • Define acceptance criteria for data processing agreements in advance.
  • Verify six months later that changes to data processing agreements have held.
  • Review the definitions in data processing agreements for terms doing heavy commercial work.

Session 2Notices and time bars in data processing agreements that are easy to miss

  • Define the trigger that would require data processing agreements to be redesigned.
  • Confirm signature authority for data processing agreements against the delegation matrix.
  • Record contemporaneous evidence of performance under data processing agreements as it happens.
  • Set escalation thresholds for data processing agreements that work out of hours.
02

Data processing agreements: the clauses that decide the outcome

2 sessions · 8 points

Session 1Security and payment protection within data processing agreements

  • Assess whether the dispute route in data processing agreements suits value and relationship.
  • Review limitation and exclusion clauses in data processing agreements for enforceability.
  • Distinguish symptoms from causes when data processing agreements underperforms.
  • Handle each variation to data processing agreements in writing, with price and time consequence agreed.

Session 2The paperwork for data processing agreements that is actually needed

  • Plan the sequence in which improvements to data processing agreements will be introduced.
  • Apply data protection requirements to personal data handled under data processing agreements.
  • Arrange the handover of data processing agreements so capability survives staff changes.
  • Establish who administers data processing agreements day to day once it is signed.
03

Data processing agreements: security, guarantees and payment protection

2 sessions · 8 points

Session 1Where data processing agreements typically breaks, and why

  • Name a single owner for each element of data processing agreements.
  • Maintain a contract register capturing key dates and obligations in data processing agreements.
  • Confirm that reporting on data processing agreements reaches the people who can act.
  • Agree the smallest change to data processing agreements that would be visibly useful.

Session 2Confidentiality and intellectual property inside data processing agreements

  • Identify the compliance obligations data processing agreements triggers and who tracks them.
  • Diarise every notice period and time bar in data processing agreements.
  • Confirm bonds, guarantees and insurance supporting data processing agreements are valid and current.
  • Agree what will be standardised in data processing agreements and what will not.
04

Data processing agreements: dispute resolution and forum selection

2 sessions · 8 points

Session 1Administering data processing agreements so the contract stays enforceable

  • Decide what will be stopped to create capacity for data processing agreements.
  • Rank the weaknesses in data processing agreements by consequence rather than by ease of fixing.
  • Set the review interval for data processing agreements and who attends.
  • Identify which party bears each material risk under data processing agreements, and whether that is intended.

Session 2Reviewing data processing agreements when nothing has gone wrong

  • Record the reasoning for any departure from the standard position on data processing agreements.
  • Check the governing law and jurisdiction clauses in data processing agreements are consistent.
  • Establish what evidence demonstrates data processing agreements is under control.
  • Protect confidential information and intellectual property shared under data processing agreements.

Choose the package that suits you

Silver Package

At least 3 people

USD1,250
  • Workshop or Program Participation
  • Airport Transfers
  • Customized Badge
  • Expert Mentorship (Private Sessions)
  • Supervision & Secretarial Services
  • Accredited Certificate of Participation
  • Complete Training Kit
  • Coffee Break
  • Closing Ceremony

Gold Package

At least 3 people

USD1,850
  • 5-night stay in a 5-star hotel
  • Workshop or Program Participation
  • Airport Transfers
  • Customized Badge
  • Expert Mentorship (Private Sessions)
  • Supervision & Secretarial Services
  • Accredited Certificate of Participation
  • Complete Training Kit
  • Coffee Break
  • Closing Ceremony

Complete your registration

We will contact you within one business day to confirm.