The DPA describes data-processing roles, safeguards, subprocessors, international transfers, and customer rights for EM3A services.