Salesforce's Data Processing Agreement (DPA)

Mike Whelan
Chief Community Officer

In this episode, Arohi Kashyap tears down the Salesforce Data Processing Addendum (DPA).

Companies that deal with private data every day may not see managing data as mission-critical. However, as Kashyap points out, corporate counsel needs to understand and manage data risks.

Kashyap uses Salesforce’s agreement to illustrate a few important principles:

  • Roles must defined, particularly as they shift during an engagement,
  • Liability should be clear in the event of a plausible data breach, and
  • Counsel must understand that not-urgent is not the same as not-important when it comes to data risks.

 

EPISODE LINKS

Review the contract here

GUEST LINKS: Website | LinkedIn

 

Tags: Salesforce, contracts, data processing agreements, privacy, data breaches

Contributors

Mike Whelan
Chief Community Officer

You may also like

Standard Office Lease with Stewart Banner

Watch as attorney Stewart Banner shares his tips for negotiating a commercial lease. He shares information about key clauses such as tenant rights, landlord responsibilities, and options to extend.

Master Service Agreement with Laurie Ehrlich

In this episode of the Contract Teardown, Laurie Ehrlich walks through an elaborate Master Service Agreement that’s used to document embedded operations. She highlights an overly broad scope of work, a risk-shifting due diligence clause, and a practical benchmarking process.