09 Nov

Data Protection Contract Management

Practical guidelines on how to evaluate, negotiate and draft data protection agreements/clauses under the EU General Data Protection Regulation (GDPR).

Gijs van Dijck, Professor of Private Law, Maastricht University
Paolo Balboni, Professor of Privacy Law, Maastricht University

In this course data protection implications of the most common IT contracts are analysed, relevant parties' duties and obligations are identified, and guidance on how to correctly deal with them in the related data protection agreements/clauses is provided.

The following questions are addressed:

  • How is an IT contract commonly structured?
  • Which are the data protection implications of the IT services analysed?
  • Actors, roles and responsibilities: who is involved and who is responsible for what?
  • Should you conduct a preliminary Data Protection Impact Assessment?
  • How to determine the appropriate technical and organisational measures to ensure a level of security appropriate to the risk?
  • How to comply with the principles of Data Protection by Design and by Default?
  • Who should keep the record of processing activities and how?
  • How to deal with possible personal data breaches?
  • How to identify issues in IT contracts?
  • How to deal with limitation of liability, hold harmless, and indemnity clauses?
  • How to negotiate appropriate data processing agreements/data protection clauses?
  • How to draft robust data processing agreements/data protection clauses?
  • How to regulate contractual and data protection-related disputes?

Also read

  • 22 May 30 Jun
    14:00 - 15:30

    Globalization & Law Network Seminar Series 2023 - 2024

    The Globalization & Law Network is composed by a group of researchers of Maastricht University, coming from different backgrounds, who study the role that law plays in a globalizing society from a holistic perspective. Invited experts will give a presentation on a specific topic followed by a Q&A...

  • 27 May
    13:00 - 14:00

    IGIR research lunch seminar, Transfer of technology from an international law and governance perspective, by Felipe de Andrade

    In the context of the IGIR institute, we proudly present Felipe de Andrade's discussion of his PhD research that he carries out at University of Antwerp.  On 27 May2024, between 13.00h and 14.00h in room B 0.013 in Faculty of Law, he will discuss about Transfer of technology: reflecting on contested...

  • 28 May 25 Jun
    14:00 - 15:30

    MCEL Seminars

    The activities of the centre include regular organisation of academic conferences and workshops, as well as monthly research seminars to which high-level speakers are invited to discuss a specific topic in the field of EU law.