GCC Build OSv0
/api

Contracts, IP & data protectionlegal.contracts_ip

P1 owner role: Stakeholder display order 5

DPA scaffolding, employee confidentiality and IP assignment, customer NDAs, and cross-border transfer mechanisms. Excludes PDPL-specific controls (Phase 1B).

Depends on: legal.entity_incorporation

Questions (6)

id prompt scope category priority artefact
legal.q.dpa_scope_and_role For data flows between the parent / group and the GCC entity, will the GCC be a controller, joint-controller, or processor of personal data, and which DPA template applies? GCC Data protection P0 text
legal.q.cross_border_transfer_mechanism What cross-border transfer mechanism will be used for personal data flowing into / out of the GCC's jurisdiction (Standard Contractual Clauses, adequacy, intra-group BCRs, derogations)? GCC Data protection P1 text
legal.q.sub_processor_register What is the initial sub-processor register for the GCC (cloud providers, SaaS vendors, payroll processors, etc.), and what is the customer-notification process for additions? GCC Data protection P2 table
legal.q.dpo_appointment Is a Data Protection Officer (DPO) required by law for the GCC, and if so who is the appointee and what is their reporting line? GCC Data protection P2 text
legal.q.employee_ip_assignment What is the standard employee IP-assignment and confidentiality clause set for GCC hires, and how does it interact with local labour-law restrictions (e.g., on inventions made off-hours / outside scope)? GCC Contracts & IP P1 text
legal.q.customer_nda_template What is the standard mutual NDA template the GCC will use for inbound and outbound discussions, and what are the carve-outs (term, residual-knowledge, return-or-destroy)? GCC Contracts & IP P2 file

Decisions related to this workstream (2)

id title scope priority evidence questions
legal.d.dpa_controller_processor_posture Set the GCC's controller / processor posture for group personal data GCC P0 4
legal.d.employee_ip_assignment_template Adopt the standard employee IP-assignment and confidentiality template GCC P1 1