Concluding data covenant agreements is a legal obligation insofar as personal data are to be processed. According to the GDPR, this applies to commissioned processing and collaborative processing under joint responsibility.

Defining the legally appropriate form of collaboration, the technical and legal content and agreeing on it with the negotiating partners has not been easier for companies and public authorities since the GDPR came into force, but rather more difficult due to increasing complexity and necessary agility. The requirements of the European Court of Justice must be observed, the perspectives of the data protection supervisory authorities must be taken into account and the increasing technical and organisational requirements must be imp ...