What to look for before signing.
WHAT TO CHECK IN ANY SUPPLIER CONTRACT
Whether personal data is involved Whether a processing agreement is included What the supplier may do with the data Security commitments Breach notification timing Sub-processor rules Deletion on termination Liability
WHAT TO BE ALERT TO
Terms permitting use of your data for their purposes Rights to use data for product improvement or model training Indefinite retention No commitment on breach notification
WHY THE IMPROVEMENT CLAUSE MATTERS
It can mean your customers' data trains systems you do not control.
WHAT TO ASK FOR
Removal, or a clear limitation.
WHAT TO CHECK ABOUT BREACH NOTIFICATION
The timing, which must let you meet your own deadline.
WHY
Your clock is short, and it depends on theirs.
WHAT TO CHECK ABOUT SUB-PROCESSORS
Whether you are notified, and whether you may object.
WHAT TO CHECK ABOUT DELETION
Whether it is on request, automatic, and how it is confirmed.
WHAT TO CHECK IN CUSTOMER CONTRACTS
What you are committing to Whether you can actually meet it
WHAT TO NEVER AGREE TO
Obligations you cannot perform.
WHAT TO RECORD
The agreement, and its key commitments.
WHAT TO CALENDAR
Renewal and review dates.
