Who is it for?

If your company outsources any work to third party vendors/suppliers, or shares personal data with a third party, you need to ensure you have a contract in place that sets out who’s responsible for what. The contract is one way of ensuring that you meet your legal responsibilities to your customers or employees. It’s also a legal requirement. Under GDPR the contracts need to contain certain mandatory wording , which means that if you haven’t already, you need to update the language in your existing supplier contracts and make sure that any new contracts you enter into contain the correct wording. This service is suitable for any business that works with an external third party that uses data on their behalf, or that shares data with an external third party.

What is included?

• Initial discussion to confirm scope and timings • Review of one specific contract, contract addendum or contract template • Provision of updated wording to be added/included in the contract • interview, where applicable, with key members of staff (e.g. your procurement team if you have one) • 1 round of revision to any wording changes (additional revisions subject to a small additional charge) • General advice on cross-border issues, use of model clauses or BCRs (not specific to any one contract) • Any e-mail/phone calls needed while work is ongoing • 10% discount on any further services bought as a result

Add-ons and Extras

• Advice on issues to be considered when selecting an outsource company and entering into a data sharing relationship - additional £75 • Advice on setting up and maintaining a contract register - additional £25 • Written guidance on your rights and responsibilities under GDPR - additional £125 • Assistance with DP due diligence on a proposed outsourced company - price depending on work required • Drawing up a stand-alone data sharing agreement to sit alongside an existing contract - additional £75 • Specific Advice on cross-border transfers - additional £75

What is not included?

• management of the contracting process • Creation of a contract register • Review of aspects of the contract other than those relating to data privacy • Mileage or accommodation, if applicable • provision of the EU Model Clauses for use if transferring outside Europe (because these are widely available for free!) • Dealing with third parties on your behalf • Help with the BCR process. If applicable, this would need to be undertaken as part of our Privacy Made to Measure service

What will I have at the end?

• The peace of mind of knowing that your contracts contain the correct wording, as required by GDPR • Appropriate wording for use in your contract template or individual contracts in future • As appropriate, general advice on contracting, managing your contracts, use of templates and other issues to consider

Review of third party

supplier contracts

£175 per contract

or

3 for £500