Data processing agreements (DPAs) are contracts between businesses and third-party service providers, outlining responsibilities and obligations regarding data protection.