The scope of this dissertation is to bring the debate about the validity of the limitation clause of the duty to indemnify. To this end, it suggests the drafting of a clause of this specific type, inserted in the context of a Data Processing Agreement, entered into between equal parties involved in the processing of personal data, without any involvement with the data subject. The analysis, therefore, begins with the general context of the General Data Protection Law, the personal data processing agents, as well as the Data Processing Agreement. Then, the work proceeds to address the general considerations that permeate the clauses of nonindemnification, understood here as a generic term that encompasses both exoneration provisions and conventions that limit the terms of the duty to indemnify. In its final part, the dissertation addresses the need to manage the risks involved in personal data operations, the analysis of the validity of the non indemnification clause provided in Terms of Use, commonly entered into with consumers, as well as finally assessing the applicability of the provision of a limitation clause of the duty to indemnify inserted in a Data Processing Agreement, entered into between equal parties.