The contract the GDPR requires between a data controller and each processor handling personal data on its behalf, specifying purposes, security, sub-processors, and audit rights. Advertisers sign DPAs with every ad tech vendor and platform; most platforms publish standard terms.
Related terms
Cite this entry:
Agency Echelon. "Data Processing Agreement." Agency Echelon Reference, reviewed September 2026. https://agencyechelon.com/reference/glossary/data-processing-agreement/