Salesforce's Data Processing Agreement (DPA)

In this episode, Arohi Kashyap tears down the Salesforce Data Processing Addendum (DPA).
Companies that deal with private data every day may not see managing data as mission-critical. However, as Kashyap points out, corporate counsel needs to understand and manage data risks.
Kashyap uses Salesforce's agreement to illustrate a few important principles:
•Roles must defined, particularly as they shift during an engagement,
•Liability should be clear in the event of a plausible data breach, and
•Counsel must understand that not-urgent is not the same as not-important when it comes to data risks.
Review the contract here: www.salesforce.com/content/da...
===============================
About Law Insider: We’re all about contracts!
Law Insider (www.lawinsider.com​​​​) is a subscription-based contract database and resource center that helps over 250,000 lawyers and business owners draft and negotiate contracts more effectively.
Join the Community
We think drafting and negotiating contracts is one of the most important skills you can build as an attorney and business owner. Law Insider is committed to supporting our user community with the tools and resources to help build these skills.
Where to Start
Looking for sample contracts, clauses or defined terms? Create a Basic Access Account and try it out. Looking for educational videos, webinars and articles on drafting and negotiating best practices? Visit our resources center.
Plans and Pricing
Law Insider offers monthly, annual and team subscriptions. For full pricing and packaging details, visit our pricing page at lawinsider.com/pricing.
Check out our on-demand webinars: www.lawinsider.com/resources/
​​Check out our reviews on G2: bit.ly/3cbBCZ1​​​​
Check out our tutorials: support.lawinsider.com​
Follow Law Insider on Twitter: / lawinsider​​​
Join the Law Insider Facebook Community: / lawin. .
========================================
Law Insider Promo Code: TEARDOWN2
========================================

Пікірлер: 1

  • @benneballe
    @benneballe11 ай бұрын

    What is interesting wit 2.1 here, is that SF outright denies being a controller themselves. This is a general problem. Whether it is Google, Microsoft, Amazon, or basically any other it-serviceprovider that collects data from their customer's users/end customers, they all act as independent data controllers when using logs, analytics, etc. for their own purposes, ie. "optimization of the product" etc. They may claim that this is for the customers' interest, but don't be fooled. The product belongs to them, meaning they use your data to make their product better to earn more money. You don't get anything out of this, meaning you cannot be data controller for that part of the processing.