Personal Data Processing Agreement Requirements

Summary

This practice note covers the requirements that states impose on written agreements between controllers and processors of personal data. Many states have passed comprehensive consumer privacy laws, with many more legislatively proposed. All of these states thus far require that the controller/processor contract governing data processing procedures include certain provisions.