Templates

Define data handling responsibilities between controller and processor.

Establish clear data handling responsibilities between a data controller and processor. Covers sub-processors, audit rights, retention, and breach notification.

Multiple organisations share control of the same data. Equal voting rights, shared responsibilities, and clear withdrawal terms.

Put a policy or terms change to a group vote. Set the quorum threshold and how long voting stays open.

Two financial services agree on data sharing, API availability, rate limits, and data retention obligations.

A group of retailers collaborates on shared privacy standards. Policy changes require a 3-of-5 quorum vote with a 14-day voting window.

Creator and platform agree on revenue split, payment terms, data transparency, and content ownership rights.

Negotiate data licensing terms through counter-offers: price, duration, purposes, and retention. Up to 10 rounds before the deal expires.

A deal committee votes on data transfer terms before an acquisition closes. Requires a super-majority (5 of 6) within a 30-day window.

Agree on data availability, response times, and what happens when things go wrong. Both parties sign the same terms.

Protect sensitive information shared between two parties. Covers what's confidential, for how long, and what's excluded.

Two universities share research data under peer governance. Either party can withdraw with 30-day notice. IRB approval required.