B. This DPA contains the mandatory clauses required by Article 28(3) of the General Data Protection Regulation (EU 2016/67) (“<strong>GDPR</strong>”) for contracts between controllers and processors.</p> <p>C. This DPA consists of two parts: the main body of the DPA, and Annex A, B (including Appendices 1 and 2) and C. .