The Essential Security Questions

Legal and Contractual

Legal agreements, terms of service, liability, and contractual obligations.

Questions in this Category

Will you sign a Data Processing Agreement (DPA)?

Explanation of the Question: This question is asking whether your organization is willing to enter into a Data Processing Agreement (DPA) with another party.

In the event of a data breach involving personal data, do you commit to notifying the customer within 72 hours?

Explanation of the Question: This question is asking whether your organization has a policy to inform customers within 72 hours if there is a data breach that compromises their personal information.

Will you delete or return all customer data at the end of the contract, at the customer's choice?

Explanation of the Question: This question is asking whether your organization has a process in place to handle customer data after the contract between your organization and the customer ends.

Do you warrant that you will not use customer data for purposes beyond providing the contracted service?

Explanation of the Question: This question is asking whether your organization guarantees that it will only use customer data for the specific purposes outlined in your service contract.

Does the customer retain ownership of all data provided to you?

Explanation of the Question: This question is asking whether the organization retains full ownership and control over any data that it provides to a third party, such as a service provider or vendor.