Every service provider that processes personal data on your behalf needs a DPA (data processing agreement), but which supplier has one, which version it is and who is missing can usually only be established by asking around. Johanna takes on the register: she reads every DPA, assigns it to the supplier and the processing activity, and reports where a current agreement is missing.

What Johanna takes on

Reads every DPA and records supplier, scope, version and signature date.
Assigns every agreement to the supplier and the processing activity it covers.
Reports when a supplier processes personal data without a current agreement in place.
Provides the current register on request, ready for inspection.

What Johanna needs from you

Johanna starts with the existing set of data processing agreements, however incomplete it may be, and access to a mailbox for newly incoming agreements.

The first few weeks

From day one, Johanna reads the existing DPAs and enters supplier, scope and version into the register. Over the first few weeks it becomes visible which suppliers have no current agreement, and those gaps can be closed one by one.

What changes

The status of the data processing agreements can be looked up at any time instead of being pulled together when needed.
A missing or outdated agreement is noticed before an audit asks for it.
The register is ready and waiting when an audit comes up.

DigiFair EU-hosted GDPR & ISO 27001 A human approves

Legal & Compliance

More roles from this department.

Daria Regulatory Monitor

See all 33 roles

Is Johanna a fit for your business?

We set the role up for your tools and processes, or tell you honestly if a different role fits better.

Book a conversation →