A DPA lays out the nature, purpose, and duration of the processing activities that will take place. It also specifies the type of personal data to be processed and the categories of individuals the data belongs to. It defines the rights and obligations the controller will have. A DPA is required for countries with applicable data protection laws, such as GDPR, including EEA, Switzerland, UK, and others (e.g., US states).
For more information see JMP Data Processing Addendum for Customers (available via JMP Trust Center).
