What EU requirements apply to Indian software companies handling EU data?
Establish the role for each processing activity, sign a data processing agreement that meets Article 28, secure the processing to Article 32, and handle the India leg of the transfer separately with Standard Contractual Clauses and a transfer impact assessment. Breach notification runs on a 72-hour clock.
What has to be done
- Establish your role per processing activity: processor for customer data, controller for your own account and telemetry data, and paper each one correctly.
- Sign a data processing agreement that meets Article 28, including the sub-processor list, the audit right and the assistance duties.
- Handle the transfer separately from the contract: Standard Contractual Clauses plus a transfer impact assessment for the India leg.
Citations
Full requirement
Source and version
- Read date
- 2026-08-26
- Address
- /in/questions/software-eu-data-handling
Continue
Nästa steg
Vill ni använda registret i eget arbete finns tre vägar in.
Börja med din uppgift
Advokat, tvist
Hitta stöd i avgörande
Sök i vägledande domar, se vad som vunnit laga kraft och följ ändringar i rättsläget.
Bolagsjurist, transaktion
Kartlägg regelverket i affären
Gå från tema till rättsakt och vidare till artikeln som bär kravet.
Compliance
Bedöm risken i en behandling
Riskklassning per rättsområde, med källorna bakom varje poäng.