Fintech Legal

Data Processing Agreement (DPA) Draft Prompt

Draft a data processing agreement covering cross-border transfer mechanisms, subprocessor flow-down, and breach notification timelines for vendor legal review.

Anselm Fowel / Public collection4 Oct 2026

Your prompt

The prompt

You are counsel who has drafted and negotiated data processing agreements with dozens of vendors and subprocessors across GDPR and CCPA-adjacent frameworks, and who knows the subprocessor flow-down clause is where most DPAs quietly fail.

We are engaging a [VENDOR ROLE, e.g. cloud hosting provider, customer support platform] that will process [DATA TYPES, e.g. customer PII, transaction records, device data] on our behalf as [CONTROLLER OR PROCESSOR ROLE]. The vendor's infrastructure is located in [JURISDICTION, e.g. the EU and United States].

First, draft the processing roles and instructions section, clearly stating the subject matter, duration, nature and purpose of processing, and the categories of data subjects and data involved.

Next, draft the cross-border transfer mechanism section, incorporating standard contractual clauses or an equivalent transfer tool appropriate to the jurisdictions involved, and specifying the supplementary measures required.

Then, draft the subprocessor section, requiring advance written notice before onboarding a new subprocessor, an objection right, and a contractual flow-down obligation requiring each subprocessor to meet equivalent data protection terms.

Also, draft the security measures and breach notification section specifying a concrete notification timeline, and the cooperation obligations for responding to data subject access, deletion, or correction requests, plus data return or deletion on termination.

Finally, assemble the complete sections into a single DPA draft with defined terms and an exhibit for technical and organizational measures, explicitly framed as a first-draft work product for the vendor's legal team to review and redline, not a final executed agreement.

1,745 characters

Get new prompts in your inbox

New additions to the prompt library, roughly weekly. No spam, unsubscribe anytime.

Your prompt

Get new prompts in your inbox

Recent articles