Common use of Special Categories of Personal Data Clause in Contracts

Special Categories of Personal Data. and criminal convictions and offences The Transferred Data includes data relating to: racial or ethnic origin political opinions religious or philosophical beliefs trade union membership genetic data biometric data for the purpose of uniquely identifying a natural person physical or mental health sex life or sexual orientation criminal convictions and offences, e.g. in the event that ARB is required to inform NCARB of details of disciplinary procedures or reasons for which an individual is no longer of good standing. none of the above set out in: And: The categories of special category and criminal records data will update automatically if the information is updated in the Linked Agreement referred to. The categories of special category and criminal records data will NOT update automatically if the information is updated in the Linked | 44 | 22 0502 Resolution 2022-1 US | UK MRA Page 19 Agreement referred to. The Parties must agree a change under Section 5.3. Relevant Data Subjects The Data Subjects of the Transferred Data are: those set out in Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. The categories of Data Subjects will update automatically if the information is updated in the Linked Agreement referred to. The categories of Data Subjects will not update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3. Purpose The Importer may Process the Transferred Data for the following purposes: The Importer may Process the Transferred Data for the purposes set out in: Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. In both cases, any other purposes which are compatible with the purposes set out above. The purposes will update automatically if the information is updated in the Linked Agreement referred to. The purposes will NOT update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3.

Special Categories of Personal Data. and criminal convictions and offences The Transferred Data includes data relating to: racial or ethnic origin political opinions religious or philosophical beliefs trade union membership genetic data biometric data for the purpose of uniquely identifying a natural person physical or mental health sex life or sexual orientation criminal convictions and offences, e.g. in the event that ARB is required to inform NCARB of details of disciplinary procedures or reasons for which an individual is no longer of good standing. offences none of the above set out in: And: The categories of special category and criminal records data will update automatically if the information is updated in the Linked Agreement referred to. The categories of special category and criminal records data will NOT update automatically if the information is updated in the Linked | 44 | 22 0502 Resolution 2022-1 US | UK MRA Page 19 Agreement referred to. The Parties must agree a change under Section 5.3. Relevant Data Subjects The Data Subjects of the Transferred Data are: those set out in Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. The categories of Data Subjects will update automatically if the information is updated in the Linked Agreement referred to. The categories of Data Subjects will not update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3. Purpose The Importer may Process the Transferred Data for the following purposes: The Importer may Process the Transferred Data for the purposes set out in: Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. In both cases, any other purposes which are compatible with the purposes set out above. The purposes will update automatically if the information is updated in the Linked Agreement referred to. The purposes will NOT update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3.. Table 4: Security Requirements Security of Transmission Security of Storage Security of Processing Organisational security measures Technical security minimum requirements Updates to the Security Requirements The Security Requirements will update automatically if the information is updated in the Linked Agreement referred to. The Security Requirements will NOT update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3. Part 2: Extra Protection Clauses Extra Protection Clauses:

Special Categories of Personal Data. and criminal convictions and offences The Transferred Data includes data relating to: racial or ethnic origin political opinions religious or philosophical beliefs trade union membership genetic data biometric data for the purpose of uniquely identifying a natural person physical or mental health sex life or sexual orientation criminal convictions and offences, e.g. in the event that ARB is required to inform NCARB of details of disciplinary procedures or reasons for which an individual is no longer of good standing. offences none of the above set out in: Schedule 1 to DPA And: The categories of special category and criminal records data will update automatically if the information is updated in the Linked Agreement referred to. The categories of special category and criminal records data will NOT update automatically if the information is updated in the Linked | 44 | 22 0502 Resolution 2022-1 US | UK MRA Page 19 Agreement referred to. The Parties must agree a change under Section 5.3. Relevant Data Subjects The Data Subjects of the Transferred Data are: those set out in Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. The categories of Data Subjects will update automatically if the information is updated in the Linked Agreement referred to. The categories of Data Subjects will not update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3. Purpose The Importer may Process the Transferred Data for the following purposes: The Importer may Process the Transferred Data for the purposes set out in: Appendix III the Linked Agreement (Data Sharing ParticularsProcessing Addendum and Appendices thereto) of the Mutual Recognition Agreement between the parties. In both cases, any other purposes which are compatible with the purposes set out above. The purposes will update automatically if the information is updated in the Linked Agreement referred to. The purposes will NOT update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3.

Special Categories of Personal Data. and criminal convictions and offences The Transferred Data includes data relating to: racial or ethnic origin political opinions religious or philosophical beliefs trade union membership genetic data biometric data for the purpose of uniquely identifying a natural person physical or mental health sex life or sexual orientation criminal convictions and offences, e.g. in the event that ARB is required to inform NCARB of details of disciplinary procedures or reasons for which an individual is no longer of good standing. offences none of the above set out in: And: The categories of special category and criminal records data will update automatically if the information is updated in the Linked Agreement referred to. The categories of special category and criminal records data will NOT update automatically if the information is updated in the Linked | 44 | 22 0502 Resolution 2022-1 US | UK MRA Page 19 Agreement referred to. The Parties must agree a change under Section 5.3. Relevant Data Subjects The Data Subjects of the Transferred Data are: those set out in Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. The categories of Data Subjects will update automatically if the information is updated in the Linked Agreement referred to. The categories of Data Subjects will not update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3. Purpose The Importer may Process the Transferred Data for the following purposes: The Importer may Process the Transferred Data for the purposes set out in: Appendix III (Data Sharing Particulars) of the Mutual Recognition Agreement between the parties. In both cases, any other purposes which are compatible with the purposes set out above. The purposes will update automatically if the information is updated in the Linked Agreement referred to. The purposes will NOT update automatically if the information is updated in the Linked Agreement referred to. The Parties must agree a change under Section 5.3.