Data processing
Data processing agreement.
Clinics processing personal data through ContinuumJournals sign one of these before real patient data is added.
Roles
The clinic is the data controller. ContinuumJournals is the data processor, acting on written instructions from the clinic.
Scope
The agreement lists data categories, purpose, retention, and sub-processors used to run the service.
Sub-processors
The current list is shared with each clinic and updated when it changes.
Security and incidents
The agreement covers security measures, breach notification timing, and who to reach for security-relevant events.