Subject areaData and infrastructure
A DPA (data processing agreement) is the contract by which a company entrusts a vendor with processing personal data on its behalf.
The GDPR makes it mandatory (art. 28) and sets its content: what the vendor may do with the data, how it protects them, to whom it may pass them and what happens when the relationship ends. For AI tools, the DPA is the document that says whether what is pasted in may be used to train the vendor's models.
An example
A components manufacturer adopts an AI service to analyse customer complaints. Before signing, it checks that the vendor's DPA excludes using the data for training and states where they are stored.
Enrico Giubertoni. Licensed under CC BY-NC 4.0: you may quote, translate and adapt this entry with the author’s name and a link, stating any changes. For commercial use, write to info@enricogiubertoni.com
Spotted an inaccuracy or something that needs updating? Write to info@enricogiubertoni.com and help make this glossary a better place.
What are your business challenges?
Tell us about your priorities and the objectives you want to reach.
You will receive a free, targeted answer within one working day.