More specifically. 2.1. The data importer shall take and implement adequate technical and organizational measures to protect the personal data against unauthorized or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed. 2.2. The data importer shall notify the data exporter of any personal data breach. 2.3. The data importer shall implement measures to ensure the confidentiality, integrity, and availability of processing systems and services. 2.4. The data importer shall implement a process for regular testing, accessing, and evaluating the effectiveness of technical and organizational measures. 2.5. Any personal data shall be stored in accordance with the practice and procedures of the data importer, as disclosed to the data exporter.
Appears in 2 contracts