Data Sharing and Data Processing Agreement
Data Sharing and Data Processing Agreements
Where personal data moves between organisations, the contract has to say who controls it, who processes it and on what terms.
- Advocates & Solicitors
- Offices in Kuala Lumpur & Johor Bahru
- Confidential, no obligation
Real lawyers, one team behind every matter
Who this is for
Sound familiar?
Businesses sharing customer data with partners
Companies engaging vendors that process personal data
Groups transferring data between entities
Organisations using overseas cloud or processing services
What's at stake
What is really at stake
- 01Data is shared with a partner, a vendor or a group company because the business need is obvious.
- 02The PDPA obligations that travel with it are not addressed.Purpose limits, security standards, retention, sub-processing and cross-border transfer are all left to assumption, and responsibility for a breach is undefined.
In plain words
Data Sharing and Data Processing Agreement
Data sharing and processing documentation covering the roles of each party, permitted purposes, security standards, sub-processing, retention and deletion, breach notification, audit rights and cross-border transfer.
What good looks like
Imagine data moving between organisations on documented terms, with purposes limited, security specified, and responsibility for a breach allocated in advance.
What you get
What we deliver
Scope and fee are agreed in writing before any work starts, so you know exactly what you are getting.
- 01
Role and responsibility determination
- 02
Permitted purpose and security standards
- 03
Sub-processing and audit provisions
- 04
Breach notification and retention terms
- 05
Cross-border transfer safeguards
How we work
Clear from the first conversation
- 1
Send a short request
Tell us what the matter is about. It takes under a minute and stays confidential.
- 2
Akmal sets a time with you
We reply within 30 minutes in office hours to arrange your consultation, online or at our KL or JB office.
- 3
Advice, then a written proposal
You get a clear view of the issues and options, then a written scope and fee proposal.
- 4
Work begins on the agreed scope
Akmal leads the matter with a team of our lawyers, working to the scope you approved. You get regular updates at every key step.
Who leads your matter
Led by Akmal Saufi, supported by our team
Akmal leads your matter as Partner. Depending on the work, other lawyers in our team handle parts of it day to day, with Akmal overseeing the matter.
Akmal Saufi
Partner, Messrs Akmal Saufi & Co
- Advocate & Solicitor, Malaysia
- Over 13 years in transactional work: M&A, joint ventures, land and infrastructure
- LLB (Hons), International Islamic University Malaysia
The team behind your matter
Meet the team →Who we have acted for
Organisations we have acted for
Federal government agencies & statutory bodies
Johor state bodies & local authorities
Government-linked companies
Private sector & NGOs
Shown with permission. Government agencies, statutory bodies and government-linked companies are identified as such. Their inclusion does not imply endorsement by any government, ministry or agency.
Next step
Request a consultation with Akmal
- 1Send a short request. It takes under a minute.
- 2Akmal reviews it and arranges a time with you.
- 3You get clear advice, then a written scope and fee proposal.
We reply within 30 minutes · Mon–Fri, 8:30am–5:30pm
Your details stay confidential. Sending a request does not mean you have appointed us.
- Licensed advocates & solicitors
- Professional indemnity insured
- Offices in KL & JB
Questions
Frequently asked questions
Still unsure? Send a short request and Akmal will tell you plainly whether and how we can help.
Do we need this with every vendor?
What about overseas processors?
Who is responsible for a breach?
What is Legal That Works?
What if I’m not sure what legal service I need?
Who will be helping me?
Before you sign
The cost of waiting
Responsibility for a data breach is allocated by the contract. Without one, it is allocated by whoever the affected individuals pursue.
We reply within 30 minutes · Mon–Fri, 8:30am–5:30pm
