{"id":184906,"date":"2023-12-06T23:32:35","date_gmt":"2023-12-06T23:32:35","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=184906"},"modified":"2024-05-29T07:35:05","modified_gmt":"2024-05-29T06:35:05","slug":"negotiate-data-processing-agreement","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/","title":{"rendered":"Should Businesses Negotiate a Data Processing Agreement?"},"content":{"rendered":"<p>A data processing agreement is a contract between a data controller and a data processor. The agreement establishes the legal framework in which the processor processes personal data on the controller&#8217;s behalf. A data processing agreement is a critical document for <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/documents-gdpr-compliance\/\">UK GDPR compliance<\/a>. Often, suppliers present data processing agreements on their own standard terms, which are drafted heavily in their favour. This article will explore whether you should negotiate a data processing agreement as a data controller.<\/p>\n<h2 class=\"wp-block-heading\">Do Businesses Need a Data Processing Agreement?<\/h2>\n<p>The <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/documents-gdpr-compliance\/\">UK GDPR<\/a> sets stringent rules regarding sharing personal data with third parties. If you process any personal information, it will generally be either a data &#8216;controller&#8217; or a data &#8216;processor&#8217;.<\/p>\n<p>A data controller is a person or organisation that decides how and why to collect and use personal data. On the other hand, a data processor is a person or organisation that processes personal data on the controller&#8217;s behalf.<\/p>\n<p>If a controller shares personal data with third-party suppliers who will process personal data, you will need a data processing agreement. This is because when a data controller uses a data processor, the parties must enter into a written agreement that establishes each party&#8217;s obligations under the UK GDPR.<\/p>\n<h2 class=\"wp-block-heading\">Should I Negotiate a Data Processing Agreement I Receive From a Supplier?<\/h2>\n<p>If acting as data processors, suppliers are equally responsible for having in place data processing agreements. Often, suppliers will include data processing terms in:<\/p>\n<ul>\n<li><a href=\"https:\/\/legalvision.co.uk\/commercial-contracts\/business-contract-terms\/\">commercial services agreements<\/a>; or<\/li>\n<li>separate agreement for customers to sign.<\/li>\n<\/ul>\n<p>As a data controller, you must review any data processing agreement proposed by a supplier. You will need to ensure that the agreement:<\/p>\n<ul>\n<li>complies with the UK GDPR rules and includes various <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-processing-agreement\/\">mandatory clauses<\/a>; and<\/li>\n<li>is fit for purpose and tailored for your project, meaning you should check that the details of the data processing activities are clear and correct.<\/li>\n<\/ul>\n<p>As part of this review, you should also check whether any terms are onerous or unfair. You can also use this time to negotiate certain terms to protect your best interests and prevent risks.<\/p>\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+448081968584\" class=\"not-prose\">0808 196 8584<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2453' style='display:none'><div id='gf_2453' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2453' id='gform_2453' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/184906#gf_2453' data-formid='2453' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2453' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2453_1000\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1000'>Name<\/label><div class='ginput_container'><input name='input_1000' id='input_2453_1000' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2453_1000'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2453_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2453_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2453_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2453_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2453_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2453_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2453_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' selected='selected'>Select ...<\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2453_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2453_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2453_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.uk\/privacy-notice\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2453_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2453_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/184906' \/><\/div><\/div><div id=\"field_2453_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2453_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><fieldset id=\"field_2453_999\" class=\"gfield gfield--type-checkbox gfield--type-choice gfield__uk-marketo-opt-in field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><legend class='gfield_label gform-field-label screen-reader-text' ><\/legend><div class='ginput_container ginput_container_checkbox'><div class='gfield_checkbox ' id='input_2453_999'><div class='gchoice gchoice_2453_999_1'>\n\t\t\t\t\t\t\t\t<input class='gfield-choice-input' name='input_999.1' type='checkbox'  value='1'  id='choice_2453_999_1'   \/>\n\t\t\t\t\t\t\t\t<label for='choice_2453_999_1' id='label_2453_999_1' class='gform-field-label gform-field-label--type-inline'>By submitting this form, you agree to receive content and event invitations from us to help you grow your business. If you do not want to receive such messages, tick here.<\/label>\n\t\t\t\t\t\t\t<\/div><\/div><\/div><\/fieldset><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2453\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2453&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=ec2463697d0d9cef7b71236ae60964c7' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2453' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2453' id='gform_theme_2453' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2453' id='gform_style_settings_2453' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2453' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2453' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='GBP' value='W2nNjLElrbUKE3gSjqn\/A6BoctNu6VOCFffRGk9u77mpJjBKNa9n5RWSlS2VQghdGUKrPWMHh7AuPkf47\/tNwUnohLqiVrVXu7U8lmA0+Bbc8w0=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2453' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2453' id='gform_target_page_number_2453' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2453' id='gform_source_page_number_2453' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2453' id='gform_ajax_frame_2453' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2453').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2453');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2453').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2453').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2453').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2453').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2453').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2453').val();gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2453, current_page]);window['gf_submitting_2453'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2453').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2453').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2453]);window['gf_submitting_2453'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2453').text());}else{jQuery('#gform_2453').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2453\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2453\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2453\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2453\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2453, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\">What Terms in a Data Processing Agreement Should I Negotiate?<\/h2>\n<p>There are a lot of terms that are often negotiated in data processing agreements. The amount of negotiation required will depend on the types of personal data being processed and how risky the project is. For example, a very low-risk project involving personal data that is already in the public domain (such as work email addresses) may not require as much negotiation. However, a large-scale project involving the supplier processing sensitive or criminal offences data will carry much more risk and need further attention.<\/p>\n<p>It is worth noting that some very large suppliers like Microsoft are unlikely to negotiate their data processing terms. If that is the case, you should carefully review and ensure you are comfortable with the terms before signing them. If you require support with understanding third-party data processing agreements, you can seek advice from an experienced data protection law solicitor.<\/p>\n<p>Below are examples of some of the most common negotiation points in data processing agreements.<\/p>\n<h3 class=\"wp-block-heading\">1. Request For Data Protection Indemnity<\/h3>\n<p>As part of data processing agreement negotiations, the allocation of liability is a crucial issue. Often, data controllers <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-protection-indemnity\/\">request indemnities<\/a>. An indemnity is a contractual promise from a party (the indemnifying party) to compensate the other (the indemnified party) for a specific loss they suffer if a trigger event happens.<\/p>\n<p>Often, data controllers will expect processors to indemnify them for any data protection law breaches that cause damage or loss. As such, data controllers can recover their losses from the processor for any damage suffered.<\/p>\n<h3 class=\"wp-block-heading\">2. Specific Security Requirements<\/h3>\n<p>The UK GDPR requires that a controller should only use a processor that provides sufficient guarantees that it will implement appropriate technical and organisational measures. Data security is critical so that the controller can have assurance that the personal data they share will be kept secure.<\/p>\n<p>As a customer, you may ask the processor to include detailed and specific security measures in your data processing agreement. Often, the parties will negotiate the types of security measures the processor is required to have in place during the contract term.<\/p>\n<h3 class=\"wp-block-heading\">3. Requesting High Liability Provisions<\/h3>\n<p>Data processors often want to limit their liability under data processing agreements. This is particularly important, given the heavy fines you might face for breaching the UK GDPR.<\/p>\n<p>Where a processor is working with multiple customers, liability will be a crucial concern. Often, processors seek to put a limit or \u2018cap\u2019 on the amount of money they will pay the controller customer if the customer brings a claim against them for breaching data protection laws.<\/p>\n<p>However, as a controller, you should carefully review the processor\u2019s limits on liability for breaching data protection laws. It is common for controllers to push for processors to accept much higher liability for data protection losses.<\/p>\n<p>Generally, data processor suppliers are likely to reject requests for unlimited liability. Often, parties agree to a much higher cap on the supplier\u2019s liability for data protection. For example, a multiple of the project charges the customer pays the supplier under the relevant agreement.<\/p>\n    <div class=\"my-7 lg:my-10 border-y-2 border-gray-100 py-7 lg:py-10 flex flex-col sm:flex-row items-start gap-10\">\n                    <img decoding=\"async\" class=\"w-52 mx-auto my-0! rounded\" src=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001038\/uk-gdpr-factsheet.jpg\" alt=\"Front page of publication\"\n                 loading=\"lazy\" width=\"208\" height=\"298\">\n                <section>\n            <div class=\"text-2xl font-bold\">GDPR Essentials Factsheet<\/div>\n            <div class=\"body-text\">\n                <p>This factsheet sets out how your business can become GDPR compliant.<\/p>\n            <\/div>\n            \n\n<a href=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001020\/LegalVision-UK-GDPR-Factsheet.pdf\" class=\" block px-5 py-3.5 max-w-fit bg-orange button__hover transition rounded text-white font-bold text-lg no-underline uppercase leading-tight text-center\" target=\"\" rel=\"\">Download Now<\/a>        <\/section>\n    <\/div>\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n<p>A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR. As a customer sharing personal data with a supplier acting as a processor, you should always carefully review data processing agreement terms. It is also sensible to negotiate data processing terms where possible, particularly where a supplier\u2019s terms are onerous and one-sided. For example, you can request a supplier indemnity to protect your business from risk and recover any losses you suffer as a result of the supplier breaching data protection laws.<\/p>\n<p>If you need help negotiating a data processing agreement, our experienced <a href=\"https:\/\/legalvision.co.uk\/it-lawyers-lp\/\">data, privacy and IT lawyers<\/a> can assist as part of our LegalVision membership. For a low monthly fee, you will have unlimited access to lawyers to answer your questions and draft and review your documents. Call us today on <a href=\"tel:+448081968584\" class=\"AVANSERnumber dynamic-number\">0808 196 8584<\/a> or visit our <a href=\"\/membership\">membership page<\/a>.<\/p>\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"9eb4f72322\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/184906\" \/>            <input value=\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"Should Businesses Negotiate a Data Processing Agreement?\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>A data processing agreement is a contract between a data controller and a data processor. The agreement establishes the legal framework in which the processor processes personal data on the controller&#8217;s behalf. A data processing agreement is a critical document for UK GDPR compliance. Often, suppliers present data processing agreements on their own standard terms,<a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\">Continue reading <span class=\"sr-only\">&#8220;Should Businesses Negotiate a Data Processing Agreement?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13436,"featured_media":509,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"2429,174981,179365,3776,180370,1489","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[27],"tags":[365,384,642,1589],"class_list":["post-184906","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-privacy-it","tag-gdpr","tag-data-processor","tag-gdpr-complicance","tag-data-processing-agreement"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Should Businesses Negotiate a Data Processing Agreement? | LegalVision UK<\/title>\n<meta name=\"description\" content=\"A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Should Businesses Negotiate a Data Processing Agreement? | LegalVision UK\" \/>\n<meta property=\"og:description\" content=\"A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-06T23:32:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-29T06:35:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1067\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sej Lamba\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sej Lamba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\"},\"author\":{\"name\":\"Sej Lamba\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"headline\":\"Should Businesses Negotiate a Data Processing Agreement?\",\"datePublished\":\"2023-12-06T23:32:35+00:00\",\"dateModified\":\"2024-05-29T06:35:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\"},\"wordCount\":1022,\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg\",\"keywords\":[\"gdpr\",\"data processor\",\"gdpr complicance\",\"data processing agreement\"],\"articleSection\":[\"Data, Privacy and IT Articles\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\",\"url\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\",\"name\":\"Should Businesses Negotiate a Data Processing Agreement? | LegalVision UK\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg\",\"datePublished\":\"2023-12-06T23:32:35+00:00\",\"dateModified\":\"2024-05-29T06:35:05+00:00\",\"author\":{\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"description\":\"A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR.\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage\",\"url\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg\",\"contentUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg\",\"width\":1600,\"height\":1067,\"caption\":\"Biometric Data: Legal Usage and Protection for Business Owners | LegalVision UK\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data, Privacy and IT Articles\",\"item\":\"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Should Businesses Negotiate a Data Processing Agreement?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.uk\/#website\",\"url\":\"https:\/\/legalvision.co.uk\/\",\"name\":\"LegalVision UK\",\"description\":\"LegalVision is a commercial law firm in the UK with a commitment to innovation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\",\"name\":\"Sej Lamba\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"contentUrl\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"caption\":\"Sej Lamba\"},\"description\":\"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/sejlamba\/\"],\"url\":\"https:\/\/legalvision.co.uk\/author\/sehajlamba\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Should Businesses Negotiate a Data Processing Agreement? | LegalVision UK","description":"A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/","og_locale":"en_GB","og_type":"article","og_title":"Should Businesses Negotiate a Data Processing Agreement? | LegalVision UK","og_description":"A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR.","og_url":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/","og_site_name":"LegalVision UK","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2023-12-06T23:32:35+00:00","article_modified_time":"2024-05-29T06:35:05+00:00","og_image":[{"width":1600,"height":1067,"url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg","type":"image\/jpeg"}],"author":"Sej Lamba","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Sej Lamba","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/"},"author":{"name":"Sej Lamba","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"headline":"Should Businesses Negotiate a Data Processing Agreement?","datePublished":"2023-12-06T23:32:35+00:00","dateModified":"2024-05-29T06:35:05+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/"},"wordCount":1022,"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg","keywords":["gdpr","data processor","gdpr complicance","data processing agreement"],"articleSection":["Data, Privacy and IT Articles"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/","url":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/","name":"Should Businesses Negotiate a Data Processing Agreement? | LegalVision UK","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg","datePublished":"2023-12-06T23:32:35+00:00","dateModified":"2024-05-29T06:35:05+00:00","author":{"@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"description":"A data processing agreement is a vital document for data controllers and processors to enter into in order to comply with the UK GDPR.","breadcrumb":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#primaryimage","url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg","contentUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2021\/11\/30225939\/brand-design-00002.jpg","width":1600,"height":1067,"caption":"Biometric Data: Legal Usage and Protection for Business Owners | LegalVision UK"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/negotiate-data-processing-agreement\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.uk\/"},{"@type":"ListItem","position":2,"name":"Data, Privacy and IT Articles","item":"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/"},{"@type":"ListItem","position":3,"name":"Should Businesses Negotiate a Data Processing Agreement?"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.uk\/#website","url":"https:\/\/legalvision.co.uk\/","name":"LegalVision UK","description":"LegalVision is a commercial law firm in the UK with a commitment to innovation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838","name":"Sej Lamba","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","contentUrl":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","caption":"Sej Lamba"},"description":"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.","sameAs":["https:\/\/www.linkedin.com\/in\/sejlamba\/"],"url":"https:\/\/legalvision.co.uk\/author\/sehajlamba\/"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/184906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/users\/13436"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/comments?post=184906"}],"version-history":[{"count":5,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/184906\/revisions"}],"predecessor-version":[{"id":188545,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/184906\/revisions\/188545"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media\/509"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media?parent=184906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/categories?post=184906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/tags?post=184906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}