Oct 5, 2020
A formal written agreement between an outsourcer/data controller and a third party/data processor that defines the obligations of all parties as it relates to the processing of personal data. (NIST, 2020).
