Data Protection Language and Considerations
The purpose of this article is to provide sample data protection language to use when considering a relationship with a vendor where all or part of the service is outsourced or "in the cloud".
The campus has used the attached data protection agreement in contractual agreements with vendors and other service providers. It was developed in collaboration with the Office of Campus Information Security and University Legal Services. It is intended to help define the nature and scope of the data that must be protected in any contract. Ultimately, this will be the determining factor in choosing to include any particular protection requirement or contract language.
Disclaimer: The sample data protection agreement should be seen as a starting point for discussion and may need to be modified as appropriate for the intended use. It is suggested the sample data protection agreement be reviewed in the full context of the service for any modifications, if any, during negotiation of contractual terms.
UW-Madison Data Protection Agreement: UW-MadisonDataProtectionAgreement.pdf