Controller Instructions. (1) The Processor shall not respond to any Data Subject request directly unless explicitly instructed to do so by the Controller or required by law. (2) Where required by law, the Processor shall: (a) Inform the Controller of the legal requirement before responding, unless prohibited by law; and (b) Limit the response to the minimum scope necessary to comply with the legal obligation.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Agreement