Processor Obligations. 4.1 The Processor may collect, process or use Personal Data only within the scope of this DPA.
Processor Obligations. 2.1. Regarding the processing operations referred to in the previous clause, Processor shall comply with all applicable legislation, including at least all data processing legislation such as the Dutch Data Protection Act.
Processor Obligations. The Processor may collect, process or use Personal Data only within the scope of this DPA. The Processor confirms that it shall process Personal Data on behalf of the Controller and shall take steps to ensure that any natural person acting under the authority of the Processor who has access to Personal Data does not process the Personal Data except on instructions from the Controller. The Processor shall promptly inform the Controller, if in the Processor’s opinion, any of the instructions regarding the processing of Personal Data provided by the Controller, breach any applicable data protection laws. The Processor shall ensure that all employees, agents, officers and contractors involved in the handling of Personal Data:
Processor Obligations. 4-1 In respect of the processing referred to in article 2, the Processor will ensure compliance with the applicable laws and regulations, in particular the GDPR.
Processor Obligations. The Processor will, during the Term:
Processor Obligations. 4.1. The Processor shall process personal data received from or processed on behalf of the Controller in connection with the Service (the “Protected Data”) only on the documented instructions of the Controller. These may be specific instructions or instructions of a general nature as set out or provided for in the Agreement. For the avoidance of doubt, this does not prevent the Processor processing Protected Data where required under applicable EU or UK law and, in such circumstances, the Processor shall notify the Controller of that legal requirement unless applicable law prohibits such notification on important public interest grounds.
Processor Obligations. 5.1 The Processor shall:
Processor Obligations. Processor will:
Processor Obligations. 9.1 Jisc (as a Processor in relation to any Institution Data Processed by (or on behalf of) the Institution pursuant to this Agreement) undertakes to the Institution that it shall: Process the Institution Data for and on behalf of the Institution in connection with the performance of the Learning Analytics Services only and for no other purpose in accordance with the terms of this Agreement and (without prejudice to Clause 12) any instructions from the Institution; unless prohibited by law, promptly notify the Institution (and in any event within forty‐ eight (48) hours of becoming aware of the same) if it considers, in its opinion (acting reasonably) that it is required by Applicable EU Law to act other than in accordance with the instructions of the Institution, including where it believes that any of the Institution's instructions under Clause 9.1.1 infringes any of the Data Protection Legislation; implement and maintain appropriate technical and organisational security measures to comply with at least the obligations imposed on a Controller by the Security Requirements. A description of the technical and organisational security measures that Jisc will implement and maintain from time to time is set out on the Jisc Site; take all reasonable steps to ensure the reliability and integrity of any of the Personnel who shall have access to the Institution Data, and ensure that each member of Personnel shall have entered into appropriate contractually‐binding confidentiality undertakings; notify the Institution promptly, and in any event within forty‐eight (48) hours, upon becoming aware of any actual or suspected, threatened or ‘near miss’ Personal Data Breach, and:
Processor Obligations. Where a Party is acting as a Processor of Personal Data on behalf of the other Party under this Agreement, the following provisions shall apply:
