Mark if there is a data processing addendum with a Entity or maybe solution

[jbumueller]

Problem statement
Maybe I just didn't see it, but I missed the ability to mark for a third party if there is a data processing addendum in the sense of the GDPR

Expected behavior

1. Go to 'Third Parties' -> Entities
2. Click on 'New'
3. There are options for "data processing addendum": confirmed/undefined/does not apply/...
4. If checked, I can upload the document (optional)

It might make sense to add something similar for the Solution:

1. Go to 'Third Parties' -> Solutions
2. Click on 'New'
3. There are options for "data processing addendum": confirmed/undefined/does not apply/inherited from provider
4. If checked, I can upload the document (optional)

Cheers
Johannes

[ab-smith]

Hi,
We can indeed mention an entity on a data transfer or mark it as processor within a Processing using the third parties module. Would that work for you?
Regards

[jbumueller]

Thanks for your idea; it is not what I thought about but it makes a lot of sense to define on one or more third party as a processor in my processing. I would really appreciate such a option.

If I added a third party to the processing, my next question in that case will be if I have confirmed with that Entity a data processing addendum/agreement (https://gdpr.eu/what-is-data-processing-agreement/) there I would expect something like shown in my Mockup:

maybe also a checkbox would also be ok like this:

a cherry on the cake would be if I can upload a PDF with the DPA

[jbumueller]

@ab-smith do you understand my idea?

[jbumueller]

@ab-smith any opportunity to make progress here? Are Pull Requests for such a change welcome?