Agreement between a data controller and a data processor

This agreement is to be used when you are acting as a data controller and engaging with a data processor. Data processors process personal data on behalf of a data controller.

This agreement would NOT be appropriate in a traditional arrangement between a hirer and a recruitment business.

This agreement would be relevant when you, the recruitment business, are acting as a data controller and your client is acting a data processor. If you outsource your services, such as your payroll function (but still engage your temporary workers directly), this agreement may be appropriate.

See also:

• REC legal guide on data protection