This is a set of questions (under development) that an organization should be asking of potential vendors related to protection and security of its data. 

Resources of Interest

Questions You Should Be Asking About Data Protection and Privacy

* What is a privacy notice?

Contractual Examples