Data Processing Agreement (Short Form)
A compact Data Processing Agreement that allocates controller and processor duties, security obligations, subprocessing, and breach notification, sized for a lower-value or lower-risk transaction.
It is deliberately shorter than the standard version, and we tell you exactly which protections were traded away for that. A shorter agreement for a transaction that does not warrant the full protective set, drafted so nothing load-bearing is missing.
Choose the version you need
- Standard$2,600
- Standard (Customer Side)$2,925
- Standard (Vendor Side)$2,925
- Short Form$1,475This page
- Long Form$4,225
- Long Form (Customer Side)$4,550
- Long Form (Vendor Side)$4,550
- Review and Redline (Customer Side)$1,475
- Review and Redline (Vendor Side)$1,475
- Negotiation and Closing (Customer Side)$4,875
- Negotiation and Closing (Vendor Side)$4,875
- Template and Playbook$3,900
Frequently asked questions
The fee covers a streamlined draft covering the provisions that carry the risk, a note listing the optional provisions left out, so the trade-off is yours, and an editable word file and a clean pdf. It is fixed at this scope: one counterparty. 2 rounds of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference—we do not bill past a flat fee without agreeing it first.
3 to 5 business days from a complete set of instructions, plus time for the 2 rounds of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$1,475 is $325/hour × 4.5 hours—the time this deliverable takes in an ordinary data protection matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $1,475 whether it takes us the estimate or twice it.
2 rounds of revisions are included. You can add more when you order, or later, at $325 per additional round. A round is one consolidated set of your comments and our revised draft back to you.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
The business terms you have agreed so far, the counterparty and which side of the deal you are on, any existing draft, term sheet, or prior agreement, and your risk tolerance on the provisions that matter most to you. Send what you have—if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other Data Protection work MC Law prepares on a flat fee.
Data Processing Agreement—Review and Redline (Customer Side)
A redline of the counterparty's Data Processing Agreement prepared for the customer, covering the document that allocates controller and processor duties, security obligations, subprocessing, and breach notification.
3 to 5 business days1 revision
Data Processing Agreement—Review and Redline (Vendor Side)
A vendor-side markup of a Data Processing Agreement you have been handed, the agreement that allocates controller and processor duties, security obligations, subprocessing, and breach notification.
3 to 5 business days1 revision
Data Sharing Agreement (Short Form)
A short-form Data Sharing Agreement that moves personal or sensitive data between organizations with a lawful basis and defined limits on reuse, written for speed without leaving the important terms out.
3 to 5 business days2 revisions
Data Sharing Agreement—Review and Redline
A markup of a Data Sharing Agreement you have been handed, the document that moves personal or sensitive data between organizations with a lawful basis and defined limits on reuse.
3 to 5 business days1 revision
Standard Contractual Clauses and Transfer Impact Assessment—Review and Redline
A review and redline of a counterparty's Standard Contractual Clauses and Transfer Impact Assessment, the agreement that legitimizes cross-border data transfers with the clauses and the assessment regulators expect to see.
3 to 5 business days1 revision