Roles
The clinic is expected to act as controller and PointMed as processor for patient data.
Legal
Data processing agreement
Agreement between the clinic (controller) and PointMed (processor).
How it works
The practical detail.
Instructions and security
The final DPA will define documented instructions, security measures, incidents and assistance with rights requests.
Deletion and return
Export, return and secure deletion periods after termination will be defined.