Data Processing Agreement—Long Form (Customer Side)
A long-form, customer-favorable Data Processing Agreement that allocates controller and processor duties, security obligations, subprocessing, and breach notification.
Every allocation of risk is made deliberately in your favor, with the reasoning noted for the negotiation. The complete protective provision set for a transaction where the downside justifies negotiating every term.
Choose the version you need
- Standard$2,600
- Standard (Customer Side)$2,925
- Standard (Vendor Side)$2,925
- Short Form$1,475
- Long Form$4,225
- Long Form (Customer Side)$4,550This page
- Long Form (Vendor Side)$4,550
- Review and Redline (Customer Side)$1,475
- Review and Redline (Vendor Side)$1,475
- Negotiation and Closing (Customer Side)$4,875
- Negotiation and Closing (Vendor Side)$4,875
- Template and Playbook$3,900
Frequently asked questions
The fee covers the complete protective provision set, drafted from your facts, a cover note on the provisions that matter most in your situation, and an editable word file and a clean pdf. It is fixed at this scope: one counterparty. 2 rounds of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference—we do not bill past a flat fee without agreeing it first.
1 to 2 weeks from a complete set of instructions, plus time for the 2 rounds of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$4,550 is $325/hour × 14 hours—the time this deliverable takes in an ordinary data protection matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $4,550 whether it takes us the estimate or twice it.
2 rounds of revisions are included. You can add more when you order, or later, at $650 per additional round. A round is one consolidated set of your comments and our revised draft back to you.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
The business terms you have agreed so far, the counterparty and which side of the deal you are on, any existing draft, term sheet, or prior agreement, and your risk tolerance on the provisions that matter most to you. Send what you have—if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other Data Protection work MC Law prepares on a flat fee.
Data Processing Agreement—Long Form (Vendor Side)
A long-form, vendor-favorable Data Processing Agreement that allocates controller and processor duties, security obligations, subprocessing, and breach notification.
1 to 2 weeks2 revisions
Children's Privacy Compliance Package—Template and Playbook
A template Children's Privacy Compliance Package and playbook your team can run without counsel on every deal, for the agreement that handles verifiable parental consent, data minimization, and the disclosures a child-directed service needs.
1 to 2 weeks2 revisions
Data Processing Agreement (Long Form)
A comprehensive Data Processing Agreement that allocates controller and processor duties, security obligations, subprocessing, and breach notification, with the full set of protective provisions a significant deal deserves.
1 to 2 weeks2 revisions
Data Processing Agreement—Negotiation and Closing (Customer Side)
Full customer-side negotiation of a Data Processing Agreement, the document that allocates controller and processor duties, security obligations, subprocessing, and breach notification, from first draft to closing.
1 to 2 weeks3 revisions
Data Processing Agreement—Negotiation and Closing (Vendor Side)
End-to-end representation of the vendor on a Data Processing Agreement, the agreement that allocates controller and processor duties, security obligations, subprocessing, and breach notification.
1 to 2 weeks3 revisions