Data Processing Agreement under the DPDP Act
A schedule to a services contract that records how the supplier may handle personal data belonging to the customer’s people, required by statute wherever a fiduciary engages a processor, and drafted today against an Act whose substantive obligations are largely not yet in force.
- 9 pages
- 118
- Word and PDF
- 14 September 2026
The 2 formats inside
- 1Data processing agreement, schedule to a services contracts.8(2), DPDP Act 2023 · SPDI Rules 2011 · CERT-In Directions 2022On its own₹149
- 2Personal data breach notification from processor to fiduciarywithin two hours of awarenessOn its own₹149
Read the opening
The first part of “Data processing agreement, schedule to a services contract”, as it downloads. Blanks are highlighted.
SCHEDULE [__] — DATA PROCESSING AGREEMENT
[to the ... Agreement dated ... between ... and ...]
This Data Processing Agreement forms part of and is subject to the agreement identified above (the “Principal Agreement”) between [Name of the customer] (the “Fiduciary”) and [Name of the supplier] (the “Processor”), and is entered into to satisfy sub-section (2) of section 8 of the Digital Personal Data Protection Act 2023. Terms defined in the Principal Agreement have the same meaning here. In the event of any conflict between this Data Processing Agreement and any other part of the Principal Agreement in relation to the processing of Personal Data, this Data Processing Agreement prevails.