When it comes to complying with the General Data Protection Regulation (GDPR), it`s important for businesses to not only ensure that they are following the rules themselves, but also that they have agreements in place with their partners and affiliates. This is where intra group agreements (IGAs) come into play.
An IGA is a contract between two companies that are part of the same group, with the purpose of regulating the processing of personal data between them. These agreements are essential to ensuring that each company within the group is complying with the GDPR and protecting the privacy rights of individuals.
Under the GDPR, data controllers are responsible for ensuring that all processing of personal data is done in accordance with the regulation. This includes ensuring that any data processors (such as affiliates or partners) are also complying with the GDPR. This is where IGAs become important.
IGAs should include a detailed outline of how personal data will be processed between the two companies, including the legal basis for processing, data protection measures, and the responsibilities of each company. This ensures that both companies are clear on their obligations and that they are working together to protect personal data.
It`s important to note that IGAs are mandatory under the GDPR for any data processing that involves joint controllership, meaning that two or more companies are responsible for determining the purposes and means of processing personal data. In these cases, an IGA is necessary to determine the roles and responsibilities of each company.
In addition to ensuring compliance with the GDPR, IGAs also provide a framework for resolving any disputes that may arise between companies within the group. This can include issues such as data breaches, access requests, or disagreements over data processing.
Overall, IGAs are an essential component of GDPR compliance for businesses with multiple entities. By ensuring that all data processing is regulated and that responsibilities are clearly defined, IGAs help to protect personal data and prevent potential legal issues.