Concluding data processing agreements is a legal obligation insofar as personal data is to be processed. According to the GDPR, this applies to controller-processor data processing and collaborative processing under joint controllership.

Defining the legally appropriate form of collaboration, the technical and legal content and agreeing on it with the negotiating partners has not been easier for companies and public authorities since the application of the GDPR, but rather more difficult due to increasing complexity and necessary agility. The requirements of the European Court of Justice must be observed, the perspectives of the data protection supervisory authorities must be taken into account, and the increasing technical and organizational requirements must be implemented ...