Data Controller The Sponsor shall be the data controller for such personal data except that, if Quintiles deals with any personal data under this Agreement in the manner of a data controller, Quintiles shall be the data controller of such personal data to the extent of such dealings. Quintiles may process "personal data", as defined in the applicable data protection legislation enacted under the same or equivalent/similar national legislation (collectively "Data Protection Legislation"), of the Investigator and Study Staff for study-related purposes and all such processing will be carried out in accordance with the Data Protection Legislation.
Other Controller Audit Any other Controller may audit SAP’s control environment and security practices relevant to Personal Data processed by SAP in line with Section 5.1 only if any of the cases set out in Section 5.1 applies to such other Controller. Such audit must be undertaken through and by Customer as set out in Section 5.1 unless the audit must be undertaken by the other Controller itself under Data Protection Law. If several Controllers whose Personal Data is processed by SAP on the basis of the Agreement require an audit, Customer shall use all reasonable means to combine the audits and to avoid multiple audits.
Security Controls for State Agency Data In accordance with Senate Bill 475, Acts 2021, 87th Leg., R.S., pursuant to Texas Government Code, Section 2054.138, Contractor understands, acknowledges, and agrees that if, pursuant to this Contract, Contractor is or will be authorized to access, transmit, use, or store data for System Agency, Contractor is required to meet the security controls the System Agency determines are proportionate with System Agency’s risk under the Contract based on the sensitivity of System Agency’s data and that Contractor must periodically provide to System Agency evidence that Contractor meets the security controls required under the Contract.
Books Records Accounting and Reports Section 8.1 Records and Accounting 74 Section 8.2 Fiscal Year 74 Section 8.3 Reports 74
Department Review The parties shall resolve disputes through written submission of their dispute to the Department’s Contract Manager. The Department shall respond to the dispute in writing within ten (10) Business Days from the date that the Department’s Contract Manager receives the dispute. The Department’s decision shall be final unless a party provides the other party with written notice of the party’s disagreement with the decision within ten (10) Business Days from the date of the Department’s decision. If a party disagrees with the Department’s decision, the party may proceed to subsection (b) below.
