{"component": "clause", "props": {"groups": [{"snippet": "The definitions and interpretative provisions at clause 1 of this contract shall also apply to this Protocol. Additionally, in this Protocol the following words shall have the following meanings unless the context requires otherwise:", "snippet_links": [{"key": "definitions-and-interpretative-provisions", "type": "clause", "offset": [4, 45]}, {"key": "clause-1", "type": "definition", "offset": [49, 57]}, {"key": "this-contract", "type": "definition", "offset": [61, 74]}, {"key": "the-context", "type": "clause", "offset": [202, 213]}], "size": 7, "samples": [{"hash": "fUlmmkJfZOo", "uri": "/contracts/fUlmmkJfZOo#data-protection-protocol", "label": "NHS Education and Training Contract", "score": 34.135887146, "published": true}, {"hash": "c6EWcT4VyCx", "uri": "/contracts/c6EWcT4VyCx#data-protection-protocol", "label": "NHS Education and Training Contract", "score": 33.6767501831, "published": true}, {"hash": "kkFTQsr4RrK", "uri": "/contracts/kkFTQsr4RrK#data-protection-protocol", "label": "NHS Education and Training Contract", "score": 33.3603057861, "published": true}], "hash": "906718dc3297f9ed64e96ba9c75fbbf4", "id": 1}, {"snippet": "Table A \u2013", "snippet_links": [{"key": "table-a", "type": "definition", "offset": [0, 7]}], "size": 1, "samples": [{"hash": "hwHq84dW078", "uri": "/contracts/hwHq84dW078#data-protection-protocol", "label": "Call Off Terms and Conditions for the Supply of Goods", "score": 26.270362854, "published": true}], "hash": "d8a49aef4624361dce45595c3323f6ae", "id": 2}, {"snippet": "Table A \u2013 Processing, Personal Data and Data Subjects", "snippet_links": [{"key": "table-a", "type": "definition", "offset": [0, 7]}, {"key": "personal-data-and-data-subjects", "type": "clause", "offset": [22, 53]}], "size": 1, "samples": [{"hash": "cpBC9YpEZVo", "uri": "/contracts/cpBC9YpEZVo#data-protection-protocol", "label": "Data Processing Agreement", "score": 27.1971244812, "published": true}], "hash": "3bfda3516af9225502fa20f8e9c3083b", "id": 3}, {"snippet": "Open issue: subjects\u2019 capacity to give informed consent", "snippet_links": [{"key": "informed-consent", "type": "definition", "offset": [39, 55]}], "size": 1, "samples": [{"hash": "1qDFxBLFJ5K", "uri": "/contracts/1qDFxBLFJ5K#data-protection-protocol", "label": "Grant Agreement", "score": 19.0, "published": true}], "hash": "4ce1649c4907508cd72bbf3fe732e987", "id": 4}, {"snippet": "Standard Protocol: In order to protect the data from unauthorized access, disclosure or use, USHE shall (1) limit access to the data to only employees of USHE who have legitimate interest in the requested purpose and use specified in USHE\u2019s Data Request form; (2) make no further disclosure of or access to the data, and (3) properly destroy of the data within 30 days after the completion of any data accumulation using secure erasure technologies.", "snippet_links": [{"key": "in-order-to", "type": "clause", "offset": [19, 30]}, {"key": "unauthorized-access", "type": "definition", "offset": [53, 72]}, {"key": "disclosure-or-use", "type": "clause", "offset": [74, 91]}, {"key": "access-to-the-data", "type": "clause", "offset": [114, 132]}, {"key": "employees-of", "type": "clause", "offset": [141, 153]}, {"key": "legitimate-interest", "type": "definition", "offset": [168, 187]}, {"key": "purpose-and-use", "type": "clause", "offset": [205, 220]}, {"key": "data-request-form", "type": "clause", "offset": [241, 258]}, {"key": "disclosure-of", "type": "clause", "offset": [280, 293]}, {"key": "days-after", "type": "definition", "offset": [364, 374]}, {"key": "completion-of", "type": "definition", "offset": [379, 392]}, {"key": "data-accumulation", "type": "clause", "offset": [397, 414]}], "size": 1, "samples": [{"hash": "jF8HcJVvqSK", "uri": "/contracts/jF8HcJVvqSK#data-protection-protocol", "label": "Master Sharing Agreement", "score": 24.0855579376, "published": true}], "hash": "477df409ccfac4004600f89f6889fb8e", "id": 5}, {"snippet": "The Parties have agreed the following derogations from the clauses at Schedule 3 of the Framework as being changes needed to reflect of the nature and circumstances of the arrangements provided for within the Contract between them:", "snippet_links": [{"key": "the-parties", "type": "definition", "offset": [0, 11]}, {"key": "have-agreed", "type": "clause", "offset": [12, 23]}, {"key": "schedule-3", "type": "definition", "offset": [70, 80]}, {"key": "the-framework", "type": "clause", "offset": [84, 97]}, {"key": "the-nature", "type": "clause", "offset": [136, 146]}, {"key": "the-arrangements", "type": "clause", "offset": [168, 184]}, {"key": "the-contract", "type": "clause", "offset": [205, 217]}], "size": 1, "samples": [{"hash": "2dGA1RYnofc", "uri": "/contracts/2dGA1RYnofc#data-protection-protocol", "label": "Contract for the Provision of Mobile and Strategic Clinical Solutions and Associated Goods", "score": 31.9385204315, "published": true}], "hash": "73597393dccb5fc66b239a624301cadd", "id": 6}, {"snippet": "1 Table A \u2013 Processing, Personal Data and Data Subjects Description Details", "snippet_links": [{"key": "table-a", "type": "definition", "offset": [2, 9]}, {"key": "personal-data-and-data-subjects", "type": "clause", "offset": [24, 55]}, {"key": "description-details", "type": "clause", "offset": [56, 75]}], "size": 1, "samples": [{"hash": "985DHdEWmC6", "uri": "/contracts/985DHdEWmC6#data-protection-protocol", "label": "Data Processing Agreement", "score": 28.9641723633, "published": true}], "hash": "4dccd5e495ebd7792d5bf724ae2c3b64", "id": 7}, {"snippet": "Guidance: This Data Protection Protocol is for use alongside the NHS terms and conditions. The Table A at the beginning of the Protocol should be completed by the Authority setting out the nature of the relationship and processing that will be taking place under the Contract.", "snippet_links": [{"key": "terms-and-conditions", "type": "clause", "offset": [69, 89]}, {"key": "table-a", "type": "definition", "offset": [95, 102]}, {"key": "the-protocol", "type": "clause", "offset": [123, 135]}, {"key": "by-the-authority", "type": "clause", "offset": [156, 172]}, {"key": "setting-out", "type": "clause", "offset": [173, 184]}, {"key": "nature-of-the-relationship", "type": "clause", "offset": [189, 215]}, {"key": "the-contract", "type": "clause", "offset": [263, 275]}], "size": 1, "samples": [{"hash": "hKcbmI2XwMe", "uri": "/contracts/hKcbmI2XwMe#data-protection-protocol", "label": "NHS Terms and Conditions for the Provision of Services", "score": 35.6626586914, "published": true}], "hash": "7652da43a59750e2ecf846e8e0bf880a", "id": 8}, {"snippet": "Two possible scenarios\nA. clinical data and images are collected from subjects specifically enrolled to be entered in the neuGRID project;\nB. clinical data and images were previously collected in different research projects and are used in the neuGRID e-infrastructure.", "snippet_links": [{"key": "clinical-data", "type": "clause", "offset": [26, 39]}, {"key": "research-projects", "type": "clause", "offset": [206, 223]}], "size": 1, "samples": [{"hash": "1qDFxBLFJ5K", "uri": "/contracts/1qDFxBLFJ5K#data-protection-protocol", "label": "Grant Agreement", "score": 19.0, "published": true}], "hash": "a5c6e3613c76f4e016ca042702393c8f", "id": 9}, {"snippet": "The definitions and interpretative provisions at clause 1 of this Contract shall also apply to this Protocol. Additionally, in this Protocol the following words shall have the following meanings unless the context requires otherwise: and \u201cData Subject\u201d \u201cProtocol\u201d or \u201cData Protection Protocol\u201d means an assessment by the Controller of the impact of the envisaged Processing on the protection of Personal Data; shall have the same meanings as set out in the Data Protection Legislation; means a request made by, or on behalf of, a Data Subject to exercise rights granted pursuant to the Data Protection Legislation; means this Data Protection Protocol;", "snippet_links": [{"key": "definitions-and-interpretative-provisions", "type": "clause", "offset": [4, 45]}, {"key": "clause-1", "type": "definition", "offset": [49, 57]}, {"key": "this-contract", "type": "definition", "offset": [61, 74]}, {"key": "the-context", "type": "clause", "offset": [202, 213]}, {"key": "data-subject", "type": "definition", "offset": [239, 251]}, {"key": "the-controller", "type": "clause", "offset": [317, 331]}, {"key": "impact-of-the", "type": "clause", "offset": [339, 352]}, {"key": "protection-of-personal-data", "type": "clause", "offset": [381, 408]}, {"key": "set-out", "type": "definition", "offset": [442, 449]}, {"key": "the-data-protection-legislation", "type": "definition", "offset": [453, 484]}, {"key": "on-behalf-of", "type": "definition", "offset": [514, 526]}, {"key": "rights-granted", "type": "clause", "offset": [555, 569]}, {"key": "pursuant-to-the", "type": "definition", "offset": [570, 585]}], "size": 1, "samples": [{"hash": "5EKoRIEJUmO", "uri": "/contracts/5EKoRIEJUmO#data-protection-protocol", "label": "NHS Education and Training Contract", "score": 35.2109298706, "published": true}], "hash": "148fcd87e6d9ba8729a427d668056f2a", "id": 10}], "next_curs": "CmESW2oVc35sYXdpbnNpZGVyY29udHJhY3Rzcj0LEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IiFkYXRhLXByb3RlY3Rpb24tcHJvdG9jb2wjMDAwMDAwMGEMogECZW4YACAA", "clause": {"children": [["scenario-a", "Scenario A"], ["the-requirement-of-subjects-informed-consent", "The requirement of subjects\u2019 informed consent"], ["", ""], ["core-labs-level", "Core labs level"], ["anonymization-procedures", "Anonymization procedures"]], "title": "DATA PROTECTION PROTOCOL", "size": 16, "parents": [], "id": "data-protection-protocol", "related": [["data-protection", "Data Protection", "Data Protection"], ["privacy-and-data-protection", "Privacy and Data Protection", "Privacy and Data Protection"], ["cybersecurity-data-protection", "Cybersecurity; Data Protection", "Cybersecurity; Data Protection"], ["data-protection-and-privacy", "DATA PROTECTION AND PRIVACY", "DATA PROTECTION AND PRIVACY"], ["data-protection-act", "Data Protection Act", "Data Protection Act"]], "related_snippets": [], "updated": "2025-07-24T04:27:57+00:00", "also_ask": [], "drafting_tip": null, "explanation": "The Data Protection Protocol clause establishes the requirements and procedures for handling, storing, and processing personal or sensitive data within the scope of the agreement. It typically outlines the obligations of each party to comply with relevant data protection laws, such as GDPR, and may specify measures like encryption, access controls, and breach notification processes. This clause ensures that both parties are aligned on safeguarding data, thereby reducing the risk of data breaches and legal non-compliance."}, "json": true, "cursor": ""}}