EU-DORA-30-04
Data Governance
30 — Key contractual provisions
Include data protection provisions
Description
Contracts must include provisions on availability, authenticity, integrity and confidentiality in relation to the protection of data, including personal data.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
EU-DORA-30-01
Documentation
Written documentation of rights and obligations
EU-DORA-30-02
Documentation
Include clear description of ICT services and functions
EU-DORA-30-03
Transparency
Specify service locations and data processing locations
EU-DORA-30-05
Data Governance
Include data access and recovery provisions
EU-DORA-30-06
Documentation
Include service level descriptions
EU-DORA-30-07
Requirement
Include ICT incident assistance obligation
EU-DORA-30-08
Requirement
Include cooperation obligation with authorities
EU-DORA-30-09
Requirement
Include termination rights and notice periods
EU-DORA-30-10
Requirement
Include security training participation conditions
EU-DORA-30-11
Monitoring
Include full service level descriptions for critical functions
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started