A data processor appointment template for controllers, processors and individuals whose personal data is being processed in England & Wales. Used to comply with UK GDPR and the Data Protection Act 2018, either to govern data processing between businesses or to inform data subjects. Covers roles (controller / processor), purposes and lawful bases, data categories, security and confidentiality, sub-processors, data subject rights and breach notification. Supplied as a Microsoft Word document with bracketed placeholders, ready to customise. Legal advice is recommended before signing. You can find a data protection lawyer through Libra to draft or review your agreement.