GDPR Data Processing Agreement Template Guide

from datetime import datetime
from typing import List, Dict, Any
from dataclasses import dataclass

@dataclass
class ProcessingDetails:
    subject_matter: str
    duration: str
    purpose: List[str]
    data_categories: List[str]
    data_subjects: List[str]

@dataclass
class SecurityMeasures:
    encryption_in_transit: bool = True
    encryption_at_rest: bool = True
    mfa_enabled: bool = True
    access_controls: str = "role-based"
    logging_enabled: bool = True

def generate_dpa(
    controller_name: str,
    processor_name: str,
    processing: ProcessingDetails,
    security: SecurityMeasures,
    subprocessors: List[str] = None
) -> str:
    """Generate a DPA document from structured data."""
    
    template = f"""# Data Processing Agreement
    
**Effective Date:** {datetime.now().strftime('%Y-%m-%d')}
**Controller:** {controller_name}
**Processor:** {processor_name}

## 1. Subject Matter and Duration
{processing.subject_matter}
Duration: {processing.duration}

## 2. Purpose
{' '.join(f'- {p}' for p in processing.purpose)}

## 3. Categories of Personal Data
{' '.join(f'- {c}' for c in processing.data_categories)}

## 4. Data Subjects
{' '.join(f'- {d}' for d in processing.data_subjects)}

## 5. Security Measures
- Encryption in transit: {'Yes' if security.encryption_in_transit else 'No'}
- Encryption at rest: {'Yes' if security.encryption_at_rest else 'No'}
- MFA for admin access: {'Yes' if security.mfa_enabled else 'No'}
- Access controls: {security.access_controls}

## 6. Subprocessors
{' '.join(f'- {s}' for s in subprocessors) if subprocessors else 'None currently approved'}
"""
    return template

import json
from datetime import datetime
from typing import List, Optional

class SubprocessorRegistry:
    def __init__(self):
        self.subprocessors: List[dict] = []
    
    def add_subprocessor(
        self, 
        name: str, 
        purpose: str, 
        data_types: List[str],
        privacy_shield: bool = False
    ) -> dict:
        subprocessor = {
            "name": name,
            "purpose": purpose,
            "data_types": data_types,
            "added_date": datetime.now().isoformat(),
            "privacy_shield_valid": privacy_shield,
            "status": "active"
        }
        self.subprocessors.append(subprocessor)
        return subprocessor
    
    def notify_controller(self, subprocessor_name: str) -> bool:
        """Simulate controller notification for new subprocessors."""
        # In production, this would send email/Slack/PM notification
        print(f"Notifying controller about new subprocessor: {subprocessor_name}")
        return True
    
    def export_list(self) -> str:
        return json.dumps(self.subprocessors, indent=2)

# Usage
registry = SubprocessorRegistry()
registry.add_subprocessor(
    name="Cloudflare",
    purpose="CDN and DDoS protection",
    data_types=["IP addresses", "request metadata"],
    privacy_shield=True
)