Data protection does not stop at arbitration. In particular, the rights and obligations of the parties involved under data protection law must be regulated. David Rosenthal has published a template of a Data Protection Agreement between arbitrators, parties and party representatives, which is available under a free license: