DPA (Data Processing Agreement)

A DPA is a legally binding contract between a data controller and a data processor (or between joint controllers) that defines obligations, rights, and responsibilities concerning how personal data is processed, secured, and protected under GDPR.