Template Data Processing / Operator Agreement

A Data Processing / Operator Agreement is an agreement  between party A and party B, if party A is passing on personal information to party B in instances where such personal information relates to and has been collected from another external person. 

Fir For

All South African organisations


No, but can be edited as needed


Prepared by an attorney with no less than 12 years post qualification experience

Common benefits of our Template Data Processing / Operator Agreement

FAQ's regarding Sale of Shares Agreements

If your business requires any outside party to use or store (process) personal information of your clients on your behalf, this requires a written agreement, known as a Data Processing / Operator Agreement, to be entered into between your business and the outside party that processes the personal information on your behalf.

An Operator is defined in the POPI Act as a “person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party”.

Examples of Operators include the following:

  • Marketing / advertising agencies;
  • Accountants / auditors;
  • Recruitment and employment agencies;
  • Lawyers;
  • Credit Bureaux / Verification agencies;
  • Any other agents;

Section 21 of the POPI Act requires that a written agreement needs to be entered into between an Operator and a Responsible Party (your business). As such, an oral agreement unfortunately is not POPI Act compliant. The written agreement needs to ensure that the Operator establishes adequate safeguards and security measures for and when processing the personal information of your clients.

Further, your business could be held liable by the Information Regulator for any breach by the Operator of the POPI Act. Our Template Data Processing / Operator Agreement is a ready to go, out of the box solution, for your business needs.