Iran Contracting Act If the Contract Amount is $1,000,000 or more and Contractor did not provide to JBE an Iran Contracting Act certification as part of the solicitation process, this section is applicable. Contractor certifies either (i) it is not on the current list of persons engaged in investment activities in Iran (“Iran List”) created by the California Department of General Services pursuant to PCC 2203(b), and is not a financial institution extending $20,000,000 or more in credit to another person, for forty-five (45) days or more, if that other person will use the credit to provide goods or services in the energy sector in Iran and is identified on the Iran List, or (ii) it has received written permission from the JBE to enter into this Agreement pursuant to PCC 2203(c).
Safety Act, Sec The employee rights set out above shall be interpreted within the context of the Ontario Human Rights Code. An employee who believes that they have been harassed, contrary to this provision shall be encouraged by both parties to follow the Employer’s policy on harassment and process. Failing resolution, an employee may follow the process set out in the Complaint, Grievance and Arbitration procedure in Article 8 of the Collective Agreement. The employee shall be encouraged by both parties to exhaust these processes prior to filing a complaint with the Ontario Human Rights Commission.
Data Protection Act 7.1 With respect to the parties' rights and obligations under this Contract, the parties agree that the Department is the Data Controller and that the Contractor is the Data Processor.
7.2 The Contractor shall:
7.2.1 Process the Personal Data only in accordance with instructions from the Department (which may be specific instructions or instructions of a general nature as set out in this Contract or as otherwise notified by the Department to the Contractor during the Term);
7.2.2 Process the Personal Data only to the extent, and in such manner, as is necessary for the provision of the Services or as is required by Law or any Regulatory Body;
7.2.3 The Contractor shall employ appropriate organisational, operational and technological processes and procedures to keep the Personal Data safe from unauthorised use or access, loss, destruction, theft or disclosure. The organisational, operational and technological processes and procedures adopted are required to comply with the requirements of ISO/IEC 27001 as appropriate to the services being provided to the Department;
7.2.4 Take reasonable steps to ensure the reliability of any Contractor Personnel who have access to the Personal Data;
7.2.5 Obtain prior written consent from the Department in order to transfer the Personal Data to any Sub-contractors or Affiliates for the provision of the Services;
7.2.6 Ensure that all Contractor Personnel required to access the Personal Data are informed of the confidential nature of the Personal Data and comply with the obligations set out in this clause 7;
7.2.7 Ensure that none of Contractor Personnel publish, disclose or divulge any of the Personal Data to any third party unless directed in writing to do so by the Department;
7.2.8 Notify the Department within five Working Days if it receives: a request from a Data Subject to have access to that person's Personal Data; or a complaint or request relating to the Department's obligations under the Data Protection Legislation;
7.2.9 Provide the Department with full cooperation and assistance in relation to any complaint or request made, including by: - providing the Department with full details of the complaint or request; - complying with a data access request within the relevant timescales set out in the Data Protection Legislation and in accordance with the Department's instructions; - providing the Department with any Personal Data it holds in relation to a Data Subject (within the timescales required by the Department); and - providing the Department with any information requested by the Department;
7.2.10 Permit the Department or the Department’s Representative (subject to reasonable and appropriate confidentiality undertakings), to inspect and audit the Contractor's data Processing activities (and/or those of its agents, subsidiaries and Sub-contractors) and comply with all reasonable requests or directions by the Department to enable the Department to verify and/or procure that the Contractor is in full compliance with its obligations under this Contract;
7.2.11 Provide a written description of the technical and organisational methods employed by the Contractor for processing Personal Data (within the timescales required by the Department) to be used solely for the purposes of this contract and provided that to do so would not be in breach of the Intellectual Property Rights (including Copyright) of a third party; and
7.2.12 Not process Personal Data outside the European Economic Area without the prior written consent of the Department and, where the Department consents to a transfer, to comply with: - the obligations of a Data Controller under the Eighth Data Protection Principle set out in Schedule 1 of the Data Protection Act 1998 by providing -an adequate level of protection to any Personal Data that is transferred; and - any reasonable instructions notified to it by the Department.
7.3 The Contractor shall comply at all times with the Data Protection Legislation and shall not perform its obligations under this Contract in such a way as to cause the Department to breach any of its applicable obligations under the Data Protection Legislation.
Xxxxx Act Subrecipient agrees that no funds provided, nor personnel employed under this Contract, shall be in any way or to any extent engaged in the conduct of political activities in violation of the Hatch Act, 5 U.S.C. Section 1501 et seq. and Chapter 15 of Title V of the U.S.C.