Data Processing Agreement
A free, editable Word Data Processing Agreement (DPA) for England & Wales, a balanced controller-to-processor agreement containing the terms required by Article 28(3) of the UK GDPR, with documented instructions, security, sub-processor controls, breach assistance, UK international-transfer safeguards, return/deletion, audit rights, and an Annex 1 details-of-processing schedule.
What's inside
A complete, UK-drafted data processing agreement
- The mandatory Article 28(3) controller-to-processor terms
- Documented instructions, confidentiality, and security (Article 32)
- Sub-processor authorisation and flow-down, plus data-subject and controller assistance
- Personal data breach notification (processor → controller) and UK transfer safeguards (IDTA / Addendum)
- Return or deletion of personal data, audit rights, and Article 30(2) records
- An Annex 1 details-of-processing schedule, governed by England & Wales
How it works
- 1
Tell us where to send it
Enter your name, work email and organisation. We email you an editable Microsoft Word (.docx) file, personalised with your name.
- 2
Fill in the bracketed fields
Open it in Word, Google Docs or LibreOffice and complete every [bracketed] field with your details and commercial terms.
- 3
Review and adapt before use
Adapt the clauses to your circumstances and have it reviewed by a qualified solicitor before you sign or publish it.
This template is not legal advice. Big Berri Limited (company no. 16562429 ), trading as Writford, is a software company, not a law firm, and is not regulated by the SRA. This document is a starting point that must be reviewed, adapted and approved by a qualified solicitor before use. It was last reviewed on 25 June 2026.
Get the free template
We email you an editable Word copy, personalised with your name. No account needed.
Looking for something else? Browse all templates.