Data processing agreements.
DPA review as part of the commercial contract — not as a standalone data protection engagement.
- Compliance with the minimum content required by Article 28(3) GDPR
- Sub-processors, breach notification deadlines, audits
- Interaction with the liability cap in the main contract
- Transfers outside the EEA and the standard contractual clauses