I will draft a custom b2b data processing agreement as a US attorney
Licensed US Attorney, DPA Drafting, Review and Negotiation Expert
About this Gig
Welcome. I am Lisa M. Richards, a licensed US attorney (Bar #318945).
If your business touches personal data on behalf of clients or hands data to vendors the GDPR legally requires a Data Processing Agreement, and CCPA/CPRA demands specific contract terms of its own.
I draft custom, negotiation-ready DPAs tailored to your actual data flows.
Your custom DPA includes:
- Controller-processor roles and documented processing instructions
- GDPR Article 28 mandatory clauses and CCPA/CPRA service provider terms
- Sub-processor authorization, flow-down, and notification mechanics
- Breach notification timelines you can actually operationalize
- Audit rights, deletion/return obligations, and liability allocation
- Standard Contractual Clauses (SCCs) for international transfers (Standard+)
- Technical and organizational measures (TOMs) security annex (Premium)
Every DPA is drafted around your product, your sub-processors, and your risk position not a generic form.
Select a package, describe your data flows at checkout, and I will deliver a signature-ready DPA. Order now.
Field of law:
Business (corporate)
Target country:
United States
Document type:
Operating agreement
•
Other
Agreement type:
Operating agreement
•
Other
Legal consulting Gigs are not screened
Please note that there is no screening process for this service. We recommend that you message the freelancer and check all necessary details before placing your order. Pro freelancers in this category have gone through a vetting process. You can find more details here.
Other Legal Consulting Services I Offer
FAQ
Are you a licensed US Attorney?
Yes, I am Lisa M. Richards, a fully licensed US attorney (Bar #318945).
Do I legally need a DPA?
If you process EU personal data for clients, GDPR Article 28 requires one. California's CPRA similarly requires specific contractual terms with service providers. Enterprise buyers also demand one before signing.
Which side do you draft for?
Either. I draft processor-favorable DPAs for SaaS vendors, controller-favorable DPAs for companies hiring vendors, and balanced versions. The Premium pack includes templates for both directions.
What are SCCs and do I need them?
Standard Contractual Clauses are the EU-approved mechanism for transferring personal data outside the EEA. If you host or access EU data from the US, you almost certainly need them — included in Standard and Premium.
What information do you need from me?
What your product does, what personal data you process, where it is hosted, your sub-processors (e.g., AWS, OpenAI, Stripe), and whether you serve EU or California clients. The checkout questionnaire captures all of it.
Do I need to message you before ordering?
No. Choose a package and complete the requirements form at checkout to begin immediately.
