抖阴视频

Data Controller To Data Controller Agreement Template for Singapore

Create a bespoke document in minutes, or upload and review your own.

4.6 / 5
4.8 / 5

Let's create your Data Controller To Data Controller Agreement

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get your first 2 documents free

Your data doesn't train Genie's AI

You keep IP ownership聽of your information

Key Requirements PROMPT example:

Data Controller To Data Controller Agreement

"I need a Data Controller to Data Controller Agreement for sharing customer loyalty program data between our retail company and a partner company in Singapore, with specific provisions for mobile app data and cross-border transfers to Australia, to be effective from March 2025."

What is a Data Controller To Data Controller Agreement?

This Data Controller to Data Controller Agreement is designed for situations where two organizations need to share personal data while maintaining independent control over their respective data processing activities. The agreement is specifically structured to comply with Singapore's data protection laws, particularly the PDPA, and provides a comprehensive framework for lawful data sharing. It is essential when organizations need to establish clear boundaries of responsibility, implement appropriate security measures, and ensure compliance with Singapore's data protection requirements. The agreement covers crucial elements including data transfer mechanisms, breach notification procedures, and respective obligations of both controllers.

What sections should be included in a Data Controller To Data Controller Agreement?

1. Parties: Identification of the data controllers and their registered details

2. Background: Context of the data sharing arrangement and relationship between parties

3. Definitions: Key terms used throughout the agreement including types of data, processing activities, and regulatory references

4. Scope of Data Sharing: Details of what personal data will be shared and for what purposes

5. Obligations of the Parties: Respective responsibilities of each controller regarding data protection

6. Security Measures: Technical and organizational measures required to protect the data

7. Data Breach Procedures: Protocol for handling and reporting data breaches

8. Term and Termination: Duration of the agreement and termination provisions

What sections are optional to include in a Data Controller To Data Controller Agreement?

1. Cross-Border Transfers: Requirements and compliance obligations for international data transfers when data will be transferred outside Singapore

2. Industry-Specific Compliance: Additional requirements for specific regulated sectors such as financial services, healthcare, or telecommunications

3. Sub-processing: Rules and requirements for engaging third-party processors when either party may need to use sub-processors

What schedules should be included in a Data Controller To Data Controller Agreement?

1. Schedule 1: Categories of Personal Data: Detailed list of personal data types being shared

2. Schedule 2: Technical and Security Measures: Detailed security requirements and standards

3. Schedule 3: Data Transfer Mechanisms: Details of transfer methods and safeguards

4. Appendix A: Contact Points: Key contacts for operational and emergency matters

5. Appendix B: Data Breach Response Plan: Detailed procedures for handling data breaches

Authors

Alex Denne

Head of Growth (Open Source Law) @ 抖阴视频 | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents | Serial Founder & Legal AI Author

Relevant legal definitions






























Clauses






























Industries

PDPA 2012: Singapore's primary data protection legislation that governs the collection, use, disclosure, and care of personal data

Personal Data Protection Regulations 2021: Regulations providing specific requirements for overseas data transfer and data breach notification procedures

PDPC Advisory Guidelines: Official guidelines covering key PDPA concepts, data protection provisions, transfer limitation obligations, and data breach notification requirements

Industry-Specific Regulations: Sector-specific regulations such as Banking Act, MAS Guidelines, healthcare regulations, and telecoms regulations that may apply depending on the industry context

GDPR Compliance: European Union's General Data Protection Regulation considerations if EU data subjects are involved in the data processing

APEC CBPR: APEC Cross-Border Privacy Rules System framework for consistent privacy protection across APEC member economies

ASEAN Framework: ASEAN Framework on Personal Data Protection providing regional principles for data protection

Scope of Data Sharing: Agreement section defining the types of data being shared and purposes of processing

Respective Responsibilities: Agreement section outlining the specific obligations and duties of each data controller

Security Measures: Agreement section specifying the technical and organizational measures required to protect personal data

Data Breach Procedures: Agreement section detailing the protocols for handling and reporting data breaches

Cross-border Transfer Mechanisms: Agreement section describing the legal mechanisms for international data transfers

Data Subject Rights: Agreement section addressing how to handle data subject requests and rights

Liability and Indemnification: Agreement section defining the allocation of risk and responsibility between parties

Teams

Employer, Employee, Start Date, Job Title, Department, Location, Probationary Period, Notice Period, Salary, Overtime, Vacation Pay, Statutory Holidays, Benefits, Bonus, Expenses, Working Hours, Rest Breaks, 聽Leaves of Absence, Confidentiality, Intellectual Property, Non-Solicitation, Non-Competition, Code of Conduct, Termination, 聽Severance Pay, Governing Law, Entire Agreemen

Find the exact document you need

DPA Addendum

A Singapore law-compliant Data Processing Addendum establishing terms for personal data handling under PDPA requirements.

find out more

Data Sharing Agreement Controller To Processor

A Singapore law-governed agreement setting out terms for processing personal data between a controller and processor under PDPA requirements.

find out more

Processor To Processor DPA

A Singapore law-compliant agreement governing personal data processing between two processors under PDPA requirements.

find out more

Data Management Agreement

A Singapore-law governed agreement establishing terms for data handling and processing, ensuring PDPA compliance.

find out more

Data Controller To Data Controller Agreement

A Singapore law-governed agreement between two organizations sharing personal data, ensuring PDPA compliance and establishing data protection responsibilities.

find out more

Controller To Controller DPA

A Singapore law-compliant agreement governing personal data sharing between two independent data controllers under PDPA requirements.

find out more

Third Party Data Processing Agreement

A Singapore law-governed agreement establishing terms for third-party personal data processing in compliance with PDPA requirements.

find out more

Data Transfer Addendum

A Singapore law-compliant addendum governing the transfer of personal data between parties under PDPA requirements.

find out more

Personal Data Transfer Agreement

A Singapore-law governed agreement regulating the transfer of personal data between organizations in compliance with PDPA requirements.

find out more

Controller Processor Agreement

A Singapore-law governed agreement defining data processing responsibilities between controllers and processors under PDPA requirements.

find out more

Order Processing Agreement

A Singapore-law governed agreement establishing terms for order processing services between a processor and merchant.

find out more

Data Protection Agreement For Employees

A Singapore-compliant agreement governing employee obligations for personal data protection under PDPA 2012.

find out more

Affiliate Addendum

A Singapore-law governed addendum establishing terms and conditions for affiliate marketing relationships.

find out more

International Data Transfer Agreement

A Singapore-law governed agreement regulating cross-border transfer of personal data in compliance with PDPA and international data protection requirements.

find out more

Data Protection Addendum

A Singapore law-compliant addendum establishing data protection obligations and requirements under PDPA for organizations handling personal data.

find out more

Download our whitepaper on the future of AI in Legal

By providing your email address you are consenting to our Privacy Notice.
Thank you for downloading our whitepaper. This should arrive in your inbox shortly. In the meantime, why not jump straight to a section that interests you here: /our-research
Oops! Something went wrong while submitting the form.

骋别苍颈别鈥檚 Security Promise

Genie is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; 骋别苍颈别鈥檚 AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

Our bank-grade security infrastructure undergoes regular external audits

We are ISO27001 certified, so your data is secure

Organizational security

You retain IP ownership of your documents

You have full control over your data and who gets to see it

Innovation in privacy:

Genie partnered with the Computational Privacy Department at Imperial College London

Together, we ran a 拢1 million research project on privacy and anonymity in legal contracts

Want to know more?

Visit our for more details and real-time security updates.