DPA Self-Screening
Find out whether your case is likely to need a data processing agreement (DPA) under Article 28 GDPR. Tell us about the engagement and see your result.
This self-screening is based on Article 28 GDPR (and Articles 44-49) and the EDPB guidelines on the concepts of controller and processor. It is not legal advice: treat your result as a starting point and, in case of doubt, involve your data protection officer or an expert data protection advisor.
Privacy by design: your answers stay in your browser and are never transmitted or stored. We only count, anonymously, that a screening was completed.
Will the company you are engaging receive, see, or otherwise handle any data or information from you?
Does that data include personal data? Personal data means any information about identifiable people.
Will they use the data only by following your instructions (so you, not they, decide what it is used for)?
Will they also be allowed to use the data for their own purposes (their own business or their own customers)?
Is any of these organisations (or their servers, data centres or subcontractors) located outside the European Economic Area?