BoZ Model Processing Agreement

the boz model processing agreement is the standard processing agreement developed by the brancheorganisaties zorg (boz) (healthcare sector organisations) in the netherlands – the partnership of the most important sector organisations in the dutch healthcare sector – to ensure uniform and careful handling of personal data and medical data under the gdpr this model describes the rights and obligations between the controller – usually a healthcare institution – and the processor , such as autoscriber, when personal data is processed on behalf of the controller by using the boz model, both parties comply with the privacy, security and accountability standards expected within the dutch healthcare sector, including requirements that are in line with nen 7510 and other sector specific data protection standards purpose the boz model processing agreement provides a clear and uniform framework for the careful processing of data within the healthcare sector the document describes how autoscriber processes data on behalf of healthcare organisations and covers topics such as the scope and purpose of data processing security and confidentiality measures management of sub processors cooperation in response to requests from data subjects data breach notifications and incident handling deletion and return of data upon termination our commitment autoscriber fully endorses the principles of the boz model processing agreement we implement strict data protection measures within our platform and our business operations to ensure the confidentiality and integrity of all personal data and health data we process on behalf of our customers by offering this model, autoscriber supports healthcare organisations in complying with the gdpr and meeting the highest standards in information security and patient privacy boz model processing agreement below you will find the downloadable boz model processing agreement template this document serves as a standard framework and can be adapted to the specific processing activities of your organisation before it is signed it must be noted that the template is in dutch , as it would only apply to netherlands based companies