蜜桃传媒

Intercompany Data Processing Agreement Template for India

A comprehensive agreement governed by Indian law that regulates the processing of personal data between entities within the same corporate group. This document ensures compliance with Indian data protection regulations, particularly the Digital Personal Data Protection Act 2023 and IT Rules, while establishing clear protocols for data handling, security measures, and breach notifications. It addresses both domestic and potential cross-border data transfers, incorporating specific Indian regulatory requirements including data localization rules and security standards.

Typically:
鈧16400
i
This cost is based on prices provided by
6 legal services in your market.
With 蜜桃传媒AI:

鈧0

i
Generate and export your first
document completely free.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Get template free

Your data doesn't train 蜜桃传媒's AI

You keep IP ownership聽of your docs

4.6 / 5
4.6 / 5
4.8 / 5
Alternatively...

What is a Intercompany Data Processing Agreement?

The Intercompany Data Processing Agreement is essential for organizations operating in India that share and process personal data between group entities. This document becomes necessary when one group entity acts as a data controller and another as a data processor, ensuring compliance with Indian data protection laws, particularly the Digital Personal Data Protection Act 2023 and associated IT Rules. It establishes the framework for lawful data processing, defines security requirements, outlines breach notification procedures, and addresses data localization requirements. The agreement is particularly crucial given India's evolving data protection landscape and the increasing scrutiny of intra-group data transfers. It helps organizations demonstrate compliance with regulatory requirements while maintaining operational efficiency in their data processing activities.

What sections should be included in a Intercompany Data Processing Agreement?

1. Parties: Identification of the data controller and data processor entities, including registered addresses and company details

2. Background: Context of the agreement, relationship between the parties, and purpose of data processing

3. Definitions: Definitions of key terms aligned with Indian data protection laws, particularly the Digital Personal Data Protection Act 2023

4. Scope and Purpose: Detailed description of the data processing activities, types of data, and processing purposes

5. Obligations of the Data Processor: Processor's responsibilities including compliance with instructions, confidentiality, and security measures

6. Obligations of the Data Controller: Controller's responsibilities including lawful basis for processing and providing documented instructions

7. Security Measures: Technical and organizational security measures required under Indian law

8. Data Breach Notification: Procedures for reporting and handling data breaches as per Indian regulations

9. Audit Rights: Controller's rights to audit processor's compliance and processor's obligation to assist

10. Sub-processing: Conditions and requirements for engaging sub-processors

11. Term and Termination: Duration of the agreement and termination provisions

12. Data Deletion or Return: Obligations regarding data handling upon agreement termination

13. Liability and Indemnity: Allocation of risks and responsibilities between parties

14. Governing Law and Jurisdiction: Specification of Indian law as governing law and jurisdiction for disputes

What sections are optional to include in a Intercompany Data Processing Agreement?

1. Cross-Border Data Transfers: Required if data will be transferred outside India, detailing compliance with data localization requirements

2. Data Protection Impact Assessment: Required for high-risk processing activities

3. Special Categories of Data: Required if sensitive personal data is being processed

4. Business Continuity: Optional section for critical processing activities requiring continuity planning

5. Insurance Requirements: Optional section specifying required insurance coverage for data processing risks

6. Force Majeure: Optional clause addressing unforeseen circumstances affecting data processing obligations

What schedules should be included in a Intercompany Data Processing Agreement?

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including data categories, purposes, and duration

2. Schedule 2 - Security Measures: Specific technical and organizational security measures implemented

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for any international data transfers

5. Schedule 5 - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches

6. Appendix A - Contact Points: Key contacts for operational, security, and breach notification matters

7. Appendix B - Audit Requirements: Specific procedures and requirements for conducting audits

Authors

Alex Denne

Advisor @ 蜜桃传媒AI | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents

Jurisdiction

India

Cost

Free to use

Find the document you need

Pre Negotiation Agreement

An Indian law-governed agreement establishing confidentiality and framework for business negotiations, with binding and non-binding elements.

Download

Controller To Controller Agreement

An Indian law-governed agreement establishing terms for personal data sharing between independent data controllers, ensuring compliance with DPDP Act 2023.

Download

Joint Controller Data Processing Agreement

An Indian law-compliant agreement establishing roles and responsibilities between joint controllers for personal data processing activities.

Download

Data Addendum

An Indian law-governed document that sets out data processing terms and compliance requirements under Indian data protection legislation.

Download

International Data Protection Agreement

An Indian law-governed agreement regulating international personal data transfers and processing, ensuring compliance with India's data protection regulations.

Download

Intra Group Data Transfer Agreement

A comprehensive agreement governing intra-group data transfers in India, ensuring compliance with Indian data protection laws and establishing data handling protocols between group entities.

Download

Data Controller To Data Controller Agreement

An Indian law-governed agreement establishing terms for personal data sharing between two independent data controllers, ensuring compliance with Indian data protection regulations.

Download

Commissioned Data Processing Agreement

An Indian law-governed agreement establishing terms for commissioned data processing, ensuring compliance with Indian data protection regulations.

Download

Intercompany Data Processing Agreement

An Indian law-governed agreement regulating intra-group personal data processing activities, ensuring compliance with Indian data protection regulations.

Download

DPA Agreement

An Indian law-compliant agreement governing the processing of personal data between a controller and processor, ensuring compliance with the Digital Personal Data Protection Act, 2023.

Download

Data Transfer Addendum

A legal addendum governing data transfers under Indian law, ensuring compliance with the DPDP Act 2023 and establishing data protection requirements between parties.

Download

Personal Data Protection Agreement

Indian law-compliant Personal Data Protection Agreement governing the processing of personal data between parties under DPDP Act 2023.

Download

Data Protection Agreement For Employees

An India-compliant agreement governing the protection and processing of employee personal data under Indian data protection laws.

Download

Affiliate Addendum

An India-compliant addendum governing affiliate marketing relationships, specifying commission structures and regulatory compliance requirements under Indian law.

Download

Data Privacy Addendum

An Indian law-compliant addendum governing personal data processing and protection obligations between contracting parties.

Download

Sub Processing Agreement

An Indian law-compliant agreement governing data handling between a processor and sub-processor, ensuring adherence to Indian data protection regulations.

Download

International Data Transfer Agreement

An Indian law-governed agreement for secure and compliant international transfer of personal data, ensuring adherence to the Digital Personal Data Protection Act, 2023.

Download

Data Protection Addendum

A legal document under Indian law that sets out data protection obligations and requirements between parties handling personal data, ensuring compliance with the DPDP Act 2023.

Download
See more related templates

骋别苍颈别鈥檚 Security Promise

蜜桃传媒 is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.

Your data is private:

We do not train on your data; 骋别苍颈别鈥檚 AI improves independently

All data stored on 蜜桃传媒 is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it