A processing agreement is a contractual agreement between a data controller and a data processor that sets out the rules and parameters for how collected data is to be processed. It is required for data processors that must comply with the GDPR to have a processing agreement in place with each data processor it works with.