Data Controllers. 3.1. To the extent that each Party is acting as a data controller: a. each Party shall, in respect of personal data shared with the other, ensure that their privacy notices are clear and provide sufficient information to the data subjects for them to understand what of their personal data may be shared with the other Party, the purposes of the data sharing and either the Identity of the other Party or a description of the type of organisation that will receive the personal data; b. each Party must ensure it requests processing of personal data on the basis of one or more lawful grounds (Including consent where legally required) and ensure compliance with Data Protection Legislation at all times for the period it remains a data controller in respect of the shared data; and c. the Parties agree to provide reasonable assistance as is necessary to each other to enable them to comply with subject access requests, other requests from data subjects who wish to exercise their rights under Data Protection Legislation, or other queries or complaints from individuals.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Agreement