Data protection terms for engagement letters that set out when the firm is a controller and when it is a processor, with full UK GDPR Article 28 terms and schedules.
Accountancy practice – compliance & management
Data Processing Terms for Accountancy Firms
About this document
Data protection terms that sit with your engagement letter or terms of business. They explain that your firm usually acts as an independent controller for accountancy and tax work, but as a processor for some services (often payroll or bookkeeping), and give the full processor terms required by Article 28 of the UK GDPR for those services, together with schedules describing the processing, security measures and sub-processors.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Accountancy practice – compliance & management
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
