DPA status tracking and renewals

A Data Processing Agreement (DPA) is a legally required contract between you and any organisation that processes personal data on your behalf. Folelse tracks the status of every DPA across your supplier register.

Uploading a signed DPA

1. 1 Open the company record.
2. 2 Set DPA Status to "In Place".
3. 3 Click the Attachments tab.
4. 4 Upload the signed DPA document.
5. 5 Set the DPA Expiry Date if the contract has a fixed term.
6. 6 Click Save.

What to check when reviewing a DPA

• The subject matter and duration of processing.
• The nature and purpose of the processing.
• The type of personal data and categories of data subjects.
• Obligations and rights of you as the controller.
• A requirement for the processor to only act on your documented instructions.
• Confidentiality obligations for all processing personnel.
• Technical and organisational security measures.
• Sub-processor restrictions and approval requirements.
• Assistance with data subject rights, security obligations, and breach notification.
• Return or deletion of data at the end of the contract.
• Auditing rights.

DPA expiry alerts

If you set an expiry date, Folelse will send email alerts 60 and 30 days before the DPA expires and flag the company as "DPA Expiring" on your dashboard. Update the DPA before it expires to remain compliant.