Controller to Processor Provisions Clause Samples
The Controller to Processor Provisions clause defines the obligations and responsibilities between a data controller and a data processor when personal data is handled on the controller's behalf. Typically, this clause outlines requirements for the processor to follow the controller's instructions, implement appropriate security measures, and assist with data subject rights requests. Its core practical function is to ensure that personal data is processed lawfully and securely, thereby helping both parties comply with data protection laws and reducing the risk of unauthorized data use or breaches.
Controller to Processor Provisions. 3.1 The parties acknowledge and agree that in respect of the processing described in:
(A) Appendix 1 and in accordance with clause 11 of the Agreement, Prudential appoints ▇▇▇▇▇▇▇ as Processor and ▇▇▇▇▇▇▇ shall process the Personal Data described in Appendix 1 on behalf of Prudential only for the purposes of performing its obligations under the Agreement (which includes the purposes described in Appendix 1); and
(B) Appendix 2 and in accordance with clause 11 of the Agreement, ▇▇▇▇▇▇▇ appoints Prudential as Processor and Prudential shall process the Personal Data described in Appendix 2 on behalf of ▇▇▇▇▇▇▇ only for the purposes of performing its obligations under the Agreement (which includes the purposes described in Appendix 2).
3.2 ▇▇▇▇▇▇▇ and Prudential each shall, when acting as a Processor, comply with the terms of this paragraph 3.
3.3 A description of the duration, nature and purpose of the processing carried out by each Processor under this Schedule, and the type of Personal Data and categories of Data Subjects contained in the Personal Data is set out in Appendix 1 and Appendix 2. The parties shall keep this information up-to-date during the term of the Agreement and shall agree any necessary variations in accordance with clause 28.5 of the Agreement.
Controller to Processor Provisions. 4.1 Where this clause applies pursuant to clause 2.1.2:
