What needs to be included in the contract? | ICO
Article 28 (3) states that the contract (or other legal act) must include the following details about the processing: the subject matter and duration of the processing; the nature and purpose of the processing; the type of personal data and categories of data subject; and. the controller's obligations and rights.