M3
COMPLIANCE
Data Processing Agreement
M3 - Data Processing Agreement
WHAT An agreement between a data controller and a data processor
Data Processor > Process the data on behalf of the controller
WHO Data Controller > Owner of the data
It regulates the purpose, characteristic, and relationship between the
WHY data processor and the data controller.
M3 - Data Processing Agreement
WHAT NEEDED TO BE DONE TO BE COMPLIANT?
HOW
Complete the agreement using THIS TEMPLATE and sign it with entity stamp (by DPO 23.24).
Upload the adapted and signed DPA to your entity folder for MSC check.
Email it to gdpr@[Link] to get it signed from AIESEC International.
PASSING THE CHECKLIST?
HOW
Adapt the document with your LEGAL ENTITY NAME in the area where applicable.
Adapt the relevant text HIGHLIGHTED IN YELLOW.
Put the signature of DPO 23.24 with entity stamp.
The document must be reviewed by the Internal Auditor.
P.S. You cannot change the Data Processing Agreement with AIESEC International
M3 - Data Processing Agreement
HOW TO RECEIVE AI SIGNATURE FOR DPA? TIMELINE
Early bird check:
1. Fully adapt DPA (in yellow highlighted part) and
Entity DPA submission: 5th June
sign by DPO with entity stamp.
AI signature: 9th June
2. Upload DPA to your entity folder for MSC check.
3. Send an email to gdpr@[Link] to request AI
Official MSC check:
signature.
Entity DPA submission: 26th June
4. Receive updates from this tracker tab (LINK).
AI signature: 30th June
M3 - Data Processing Agreement
Entity Stamp & DPO's Signature
The format of the signature must be PNG or if
its not possible, the background must be white
Insert the Entity's stamp on the left side of the
signature as shown in the given example
M3 - Data Processing Agreement
HOW What needed to be done to be amended?
Fill the information highlighted and put the DPO's
Put the date on the first sentence of page 3
signature along with the Entity's stamp on the
with the date of when you sign the document
right side of the signature
M3 - Data Processing Agreement
HOW What needed to be done to be amended?
Adjust and amended the IT service provider's
information in the "Recipients" part on the
last page of the document
Adjust and amended the highlighted text in
the "Contacts points for data protection
inquires" with the DPO's specification on the
last page of the document
GDPR Global Support Team
Mary Henry Chia Rafif
AI FIN Man. GST GDPR Man. GST GDPR Man. GST GDPR Man.
CONTACT
Email: gdpr@[Link]
DPO Group: [Link]/dpo23.24
