Data Processing Agreement (DPA)
Legal
A GDPR-mandated contract between a controller and processor setting out the subject matter, duration, nature, purpose, and security obligations of the processing. Functionally analogous to a HIPAA BAA but broader in scope.