What is Data Processing Agreement? — UK Software Development Guide
Direct Answer
A Data Processing Agreement (DPA) is a contract required by UK GDPR Article 28 between a data controller (who determines the purpose of data processing) and a data processor (who processes data on behalf of the controller). The DPA must specify: the subject matter and duration of processing, the nature and purpose of processing, the type of personal data and categories of data subjects, and the obligations and rights of the controller.
Dpa in the UK
DPAs are mandatory for all UK software companies processing personal data on behalf of clients. If you build a SaaS platform that processes your customers' personal data, you are a data processor and must include a DPA in your terms of service. ClickMasters includes a UK GDPR Article 28 DPA in all client contracts. Common DPA requirements that affect software architecture: you must only process data for the purposes specified in the DPA (no using client data for your own analytics without DPA amendment), you must assist the controller with data subject rights requests (your system must support this technically), and you must notify the controller of personal data breaches within 72 hours.
Related Glossary Terms
UK GDPR
UK GDPR explained for UK software developers and business owners. UK GDPR (UK General Data Protection Regulation) is the post-Brexit version of EU GDPR, retained into UK law via the Euro... UK context, examples, and related services.
SAAS
SaaS explained for UK software developers and business owners. SaaS (Software as a Service) is a software distribution model where applications are hosted centrally and delivered to c... UK context, examples, and related services.
Dtac
DTAC explained for UK software developers and business owners. DTAC (Digital Technology Assessment Criteria) is the NHS's mandatory assessment framework for digital health technologie... UK context, examples, and related services.
DEVOPS
DevOps explained for UK software developers and business owners. DevOps is a set of practices, principles, and culture that combines software development (Dev) and IT operations (Ops) t... UK context, examples, and related services.
Postgresql
PostgreSQL explained for UK software developers. PostgreSQL (commonly called Postgres) is a powerful, open-source relational database management system. It supports adva... UK context and related services.
GRAPHQL
GraphQL explained for UK software developers. GraphQL is a query language for APIs and a server-side runtime for executing those queries, developed by Meta (Facebook)... UK context and related services.
Get Expert Advice on Dpa
Speak with our UK software development experts about Dpa. Free consultation, transparent pricing, no obligation.