Data Processing Agreement (DPA)
Data Processing Agreement (DPA)
Between:
Yashoraj IT Solutions (Data Processor)
AND
Clinic/Doctor (Data Controller)
1. Purpose
Processor will manage and store patient data ONLY for providing Dental Clinic Pro services.
2. Data Controller Rights
Owns the patient data
May download/export data
Responsible for data accuracy & legality
3. Data Processor Responsibilities
Processor will:
Secure data
Store encrypted information
Prevent unauthorized access
Notify in case of breach
Delete data when requested
4. Data Retention
Data retained as long as subscription is active.
Deleted permanently after cancellation request.
5. Sub-Processors
Processor may use:
Hosting providers
Email/SMS gateways
Backup servers
(All compliant with industry standards)
6. Legal Compliance
Both parties must comply with:
DPDP Act 2023
IT Act 2000
Medical privacy rules