¶¶Òõ¶ÌÊÓƵ

All Countries
Data Privacy
Controller To Controller DPA

Controller To Controller DPA Template for Singapore

Create a bespoke document in minutes,  or upload and review your own.

4.6 / 5
4.8 / 5

Let's create your Controller To Controller DPA

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get your first 2 documents free

Your data doesn't train Genie's AI

You keep IP ownership of your information

Key Requirements PROMPT example:

Controller To Controller DPA

"I need a Controller To Controller DPA under Singapore law for sharing customer data between our fintech company and a partnering bank, with specific provisions for cross-border transfers to Australia starting March 2025."

Celebrated by
Collaborations with
Investors
Document background
The Controller to Controller DPA is essential when two organizations acting as independent data controllers need to share personal data in Singapore. This agreement type is particularly important under Singapore's PDPA framework, which requires organizations to implement appropriate data protection measures when handling personal data. The document outlines specific responsibilities, security requirements, breach notification procedures, and compliance obligations for both controllers, ensuring lawful and secure data sharing practices while maintaining individual privacy rights.
Suggested Sections

1. Parties: Identification and details of both data controllers

2. Background: Context of the data sharing arrangement and references to key Singapore legislation including PDPA

3. Definitions: Key terms used throughout the agreement including PDPA-specific terminology

4. Purpose and Scope: Specific purposes for which personal data will be shared and scope of processing activities

5. Data Protection Obligations: Compliance with PDPA obligations by both parties including the Nine Data Protection Obligations

6. Security Measures: Technical and organizational measures for data protection in accordance with PDPA requirements

7. Data Breach Notification: Procedures for handling and reporting data breaches as per PDPA Regulations

8. Term and Termination: Duration of the agreement and termination provisions

Optional Sections

1. Cross-border Transfers: Provisions for international data transfers in compliance with PDPA and ASEAN Framework requirements

2. Sub-processing: Terms and conditions for engaging sub-processors by either controller

3. Industry-Specific Requirements: Additional requirements for specific regulated sectors under Singapore law

Suggested Schedules

1. Description of Processing: Detailed description of data processing activities and categories of personal data

2. Security Measures: Detailed technical and organizational security measures implemented by both parties

3. Approved Sub-processors: List of approved sub-processors and their processing activities

4. Data Transfer Mechanisms: Details of cross-border transfer mechanisms and safeguards

Authors

Alex Denne

Head of Growth (Open Source Law) @ ¶¶Òõ¶ÌÊÓƵ | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents | Serial Founder & Legal AI Author

alex.den.21@genieai.co
Relevant legal definitions




























Clauses

























Industries

Personal Data Protection Act 2012 (PDPA): Singapore's primary data protection legislation that includes the Nine Data Protection Obligations and mandatory breach notification requirements

Personal Data Protection Regulations 2021: Secondary legislation under PDPA providing detailed requirements for data protection compliance

Personal Data Protection (Notification of Data Breaches) Regulations 2021: Specific regulations detailing the requirements and procedures for mandatory data breach notifications

PDPC Advisory Guidelines on Key Concepts: Official guidelines from the Personal Data Protection Commission explaining key concepts and interpretation of the PDPA

PDPC Advisory Guidelines on Transfer of Personal Data Outside Singapore: Specific guidelines governing international data transfers and cross-border data protection requirements

ASEAN Framework on Personal Data Protection: Regional framework providing principles for data protection in ASEAN member states

APEC Privacy Framework: Asia-Pacific Economic Cooperation framework for privacy and data protection standards

Cybersecurity Act 2018: Singapore legislation establishing a framework for the protection of critical information infrastructure and cybersecurity

Electronic Transactions Act: Singapore law governing electronic transactions and digital signatures, relevant for data processing agreements

Teams

Employer, Employee, Start Date, Job Title, Department, Location, Probationary Period, Notice Period, Salary, Overtime, Vacation Pay, Statutory Holidays, Benefits, Bonus, Expenses, Working Hours, Rest Breaks,  Leaves of Absence, Confidentiality, Intellectual Property, Non-Solicitation, Non-Competition, Code of Conduct, Termination,  Severance Pay, Governing Law, Entire Agreemen

Find the exact document you need

DPA Addendum

find out more

Data Sharing Agreement Controller To Processor

find out more

Processor To Processor DPA

find out more

Data Management Agreement

find out more

Data Controller To Data Controller Agreement

find out more

Controller To Controller DPA

find out more

Third Party Data Processing Agreement

find out more

Data Transfer Addendum

find out more

Personal Data Transfer Agreement

find out more

Controller Processor Agreement

find out more

Order Processing Agreement

find out more

Data Protection Agreement For Employees

find out more

Affiliate Addendum

find out more

International Data Transfer Agreement

find out more

Data Protection Addendum

find out more

Download our whitepaper on the future of AI in Legal

By providing your email address you are consenting to our Privacy Notice.
Thank you for downloading our whitepaper. This should arrive in your inbox shortly. In the meantime, why not jump straight to a section that interests you here: /our-research
Oops! Something went wrong while submitting the form.

³Ò±ð²Ô¾±±ð’s Security Promise

Genie is the safest place to draft. Here’s how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

Our bank-grade security infrastructure undergoes regular external audits

We are ISO27001 certified, so your data is secure

Organizational security

You retain IP ownership of your documents

You have full control over your data and who gets to see it

Innovation in privacy:

Genie partnered with the Computational Privacy Department at Imperial College London

Together, we ran a £1 million research project on privacy and anonymity in legal contracts

Want to know more?

Visit our for more details and real-time security updates.

Read our Privacy Policy.