¶¶Òõ¶ÌÊÓƵ

1. Cross-border Data Transfers: Required when personal data may be transferred outside of Canada, specifying transfer mechanisms and safeguards

2. Special Categories of Data: Include when processing sensitive personal data such as health information or biometric data

3. Data Protection Impact Assessment: Required when processing activities are likely to result in high risk to individuals

4. Insurance Requirements: Specific insurance obligations for data protection, typically included for high-risk processing

5. Business Continuity: Include when processing is critical to business operations, specifying disaster recovery requirements

6. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, financial services)

1. Schedule A - Description of Processing Activities: Detailed inventory of processing activities, including data categories, purposes, and processing operations

2. Schedule B - Technical and Organizational Security Measures: Specific security controls and measures implemented by the processor

3. Schedule C - Approved Sub-processors: List of pre-approved sub-processors and their processing activities

4. Schedule D - Data Transfer Mechanisms: Details of mechanisms used for any cross-border data transfers

5. Schedule E - Service Levels: Performance metrics and response times for data-related services

6. Appendix 1 - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches

7. Appendix 2 - Compliance Checklist: Checklist of compliance requirements and documentation

8. Appendix 3 - Contact Details: Key contacts for both parties for various aspects of agreement administration