AI Dictionary › Regolamentazione

DPA (data processing agreement)

DPA (accordo trattamento dati)

A DPA, or data processing agreement, is a binding contract governing the relationship between a data controller, who decides the purposes and means of using personal data, and a data processor, who processes it on the controller's behalf. It is required by European data protection law whenever an organisation entrusts an external provider with processing personal data. The document sets out what the provider may and may not do with the data, the security measures to adopt, the handling of sub-processors, obligations in case of a breach and the fate of the data at the end of the service.

Definition

When a company uses a cloud AI service to which it sends personal data, the provider typically acts as a processor and a DPA becomes necessary. The agreement ensures processing takes place within defined, lawful limits, protecting both the organisation and the individuals concerned.

Related terms

• Data residency
• Data minimization
• Conformity assessment
• Transparency obligations
• Right to explanation

More in Regolamentazione

• EU AI Act
• Prompt Injection
• AI Content Moderation
• GDPR
• Privacy by Design
• Deepfake
• AI Watermarking
• Copyright and AI

Put it into practice

• Real scenario: apply this concept with an instant AI verdict.
• Daily gym: short drills to train dictionary concepts.
• Playoff game: challenge other players, elimination-style.

📱 Download the Android app (beta) iOS coming soon

Say what you mean. Get what you need.

Grace Certified, the AI coach that trains and certifies your prompt engineering, by Agora Intelligence.