Centre Data Processing Agreement

Draft Data Processing Agreement between MedCentre OS (processor) and the diagnostic centre (controller).

Should cover processing instructions, security measures, subprocessors, breach notification timelines, audit rights, and return/deletion of data at end of engagement.

Obtain DPCO / counsel review before commercial execution.