Protection of Personal Data. 25.1 The Parties agree that they may obtain and have access to personal data for the duration of the Agreement for the fulfilment of the rights and obligations contained herein. In performing the obligations as set out in this Agreement, the Parties shall at all times ensure that:
Protection of Personal Data. The Company shall, in relation to Personal Data: fully comply with all requirements of the PDPA, including the requirements concerning the collection, use and disclosure of Personal Data; process Personal Data only in accordance with the written instructions given by IHiS and to such extent necessary and appropriate for the completion of the Purpose; promptly deal with any enquiry from IHiS relating to the Company’s processing of Personal Data; not transfer or allow the Personal Data to be transferred outside of Singapore, unless expressly instructed or authorised by IHiS; and provide all necessary co-operation and assistance (whether to IHiS or otherwise) to allow access and/or correction of Personal Data in accordance with the PDPA. Without prejudice to Clause 4.1 above, the Company ensure: that any Personal Data belonging to IHiS or its Affiliates which is held by the Company is protected against loss, unauthorised access, use, modification, disclosure or other misuse, and that only authorised personnel have access to that Personal Data; that, to the extent that the Personal Data is no longer required by the Company for legal or business purposes, that Personal Data is destroyed or returned to IHiS in accordance with Clause 5 below; that IHiS is immediately alerted in writing (with full particulars) of any unauthorised access, disclosure or other breach of this Clause 4 and the Company will undertake, as soon as reasonably practicable, all steps to prevent further unauthorised access, disclosure or other breach of this clause (including providing IHiS with such reports or information concerning such steps as and when requested by IHiS); and it keeps itself appraised of any and all notices and circulars which IHiS may from time to time notify to the Company, including without limitation any policies, guidelines, circulars or notices relating to personal data (“PDPA Documentation”), and to perform its duties or discharge its liabilities in connection with the Purpose in a manner which is consistent with the PDPA Documentation, and will not cause IHiS to be in breach of the same. For the purposes of this clause, the Company hereby expressly acknowledges and agrees that it has read the PDPA Documentation and is aware of and will compensate IHiS for any and all potential loss and damage caused to IHiS and/or its Affiliates arising from or in connection with any breach of this clause. Notwithstanding and further to anything stated elsewhere in the NDA, IHiS r...
Protection of Personal Data. 18.1 With respect to the Parties' rights and obligations under the Contract, the Parties agree that the Authority is the Data Controller and that the Contractor is the Data Processor.
Protection of Personal Data. 15.1 With respect to the parties' rights and obligations under this Contract, the parties agree that the CUSTOMER is the Data Controller and that the CONTRACTOR is the Data Processor.
Protection of Personal Data. E2.1 With respect to the Parties' rights and obligations under this Contract, the Parties agree that the Authority is the Data Controller and that the Contractor is the Data Processor.
Protection of Personal Data. 7.1 With respect to the parties' rights and obligations under this Contract, the parties agree that DFID is the Data Controller and that the Supplier is the Data Processor.
Protection of Personal Data. 27.5.1 Where any Personal Data are Processed in connection with the exercise of the Parties’ rights and obligations under this Framework Agreement, the Parties acknowledge that the Authority is the Data Controller and that the Supplier is the Data Processor.
Protection of Personal Data. 1. The Parties agree to cooperate with a view to ensuring that levels of protection of personal data are consistent with relevant international standards, including the OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data.
Protection of Personal Data. Where any Personal Data are Processed in connection with the exercise of the Parties’ rights and obligations under this Framework Agreement, the Parties acknowledge that the Authority is the Data Controller and that the Supplier is the Data Processor. The Supplier shall: Process the Personal Data only in accordance with instructions from the Authority to perform its obligations under this Framework Agreement; ensure that at all times it has in place appropriate technical and organisational measures to guard against unauthorised or unlawful Processing of the Personal Data and/or accidental loss, destruction, or damage to the Personal Data; not disclose or transfer the Personal Data to any third party or Supplier Personnel unless necessary for the provision of the Goods and/or Services and, for any disclosure or transfer of Personal Data to any third party, obtain the prior written consent of the Authority (save where such disclosure or transfer is specifically authorised under this Framework Agreement); take reasonable steps to ensure the reliability and integrity of any Supplier Personnel who have access to the Personal Data and ensure that the Supplier Personnel: are aware of and comply with the Supplier’s duties under this Clause 24.5.2 and Clause 24.2 (Confidentiality); are informed of the confidential nature of the Personal Data and do not publish, disclose or divulge any of the Personal Data to any third party unless directed in writing to do so by the Authority or as otherwise permitted by this Framework Agreement; and have undergone adequate training in the use, care, protection and handling of personal data (as defined in the DPA); notify the Authority within five (5) Working Days if it receives: from a Data Subject (or third party on their behalf) a Data Subject Access Request (or purported Data Subject Access Request), a request to rectify, block or erase any Personal Data or any other request, complaint or communication relating to the Authority's obligations under the DPA; any communication from the Information Commissioner or any other regulatory authority in connection with Personal Data; or a request from any third party for disclosure of Personal Data where compliance with such request is required or purported to be required by Law; provide the Authority with full cooperation and assistance (within the timescales reasonably required by the Authority) in relation to any complaint, communication or request made (as referred to at Clause 24.5....
Protection of Personal Data. With respect to the parties' rights and obligations under this Contract, the parties agree that the CUSTOMER is the Data Controller and that the CONTRACTOR is the Data Processor. The CONTRACTOR shall: Process the Personal Data only in accordance with instructions from the CUSTOMER (which may be specific instructions or instructions of a general nature as set out in this Contract or as otherwise notified by the CUSTOMER to the CONTRACTOR during the Term); Process the Personal Data only to the extent, and in such manner, as is necessary for the provision of the Ordered IT Products or as is required by Law or any Regulatory Body; implement appropriate technical and organisational measures to protect the Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or disclosure. These measures shall be appropriate to the harm which might result from any unauthorised or unlawful Processing, accidental loss, destruction or damage to the Personal Data and having regard to the nature of the Personal Data which is to be protected; take reasonable steps to ensure the reliability of any CONTRACTOR Personnel who have access to the Personal Data; obtain prior written consent from the CUSTOMER in order to transfer the Personal Data to any Sub-Contractors or Affiliates for the provision of the Ordered IT Products; ensure that all CONTRACTOR Personnel required to access the Personal Data are informed of the confidential nature of the Personal Data and comply with the obligations set out in this Clause 15; ensure that none of the CONTRACTOR Personnel publish, disclose or divulge any of the Personal Data to any third party unless directed in writing to do so by the CUSTOMER; notify the CUSTOMER (within five (5) Working Days) if it receives:
