⚠ Draft placeholder: to be reviewed by a lawyer before launch.
Data Processing Agreement
Last updated: [DATE]
Roles
[PLACEHOLDER] The clinic is the Data Fiduciary; we act as Data Processor.
Processing instructions
[PLACEHOLDER] Scope, nature and purpose of processing.
Security measures
[PLACEHOLDER] Technical and organisational measures.
Sub-processors
[PLACEHOLDER] List of hosting, email and messaging providers.
Breach notification
[PLACEHOLDER] Timelines and process.