The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Use this tool to build a contract when using standard contractual clauses to transfer personal data from an EEA-based controller to your UK-based organisation, as part of your preparations if there is no-adequacy agreement by the end of the transition period. 

Once you click start you will be asked a number of questions about the nature of the data you're transferring, the organisations. You will also be asked to tick any optional commercial clauses you would like to include.

A draft contract will be created. It will contain all the clauses you need, plus the information you provide about the data transfer and the additional clauses you select.

Download the draft contract as a word document. You will need to and complete the remaining specific details.

You will need to add in the details of the parties to the contract, which are marked for you to check and complete. You may also add more details where you have selected 'other'when answering any of the questions in the tool.  

Both parties will need to sign the document before it is in force and valid.

Before signing you should consider seeking your own legal advice.

Start now

 All parties may wish to download this blank template of the contract, which contains guidance notes.