Common use of DATA CONTROLLER OBLIGATIONS Clause in Contracts

DATA CONTROLLER OBLIGATIONS. 5.1. The RSP shall provide Customer Personal Data to NBI only to the extent necessary to enable NBI achieve the Processing Purposes and in this regard the RSP shall not provide any excessive or unnecessary Customer Personal Data to NBI. All Customer Personal Data provided by the RSP to the NBI shall be accurate and up to date. 5.2. The RSP acknowledges that NBI is reliant on the RSP for lawful instruction as to the extent of the NBI’s processing of Customer Personal Data and accordingly the RSP agrees to provide clear written instructions in a timely manner to NBI, which shall at all times be in compliance with the Data Protection Laws. 5.3. Notwithstanding clause 5.2 above, NBI retains the discretion to refuse any such instruction received if, in NBI’s reasonable opinion, such instruction infringes the Data Protection Laws or any other applicable law. In such circumstances, NBI shall notify in writing the RSP of same, including the reasons underlying its opinion. 5.4. As regards access to the NBI Operational Environment, the RSP shall ensure that its staff, employees, contractors and all other personnel authorised to access NBI Operational Environment, shall ensure the security and confidentiality of all passwords, credentials and access

DATA CONTROLLER OBLIGATIONS. 5.1. The RSP shall provide Customer Personal Data to NBI only to the extent necessary to enable NBI achieve the Processing Purposes and in this regard the RSP shall not provide any excessive or unnecessary Customer Personal Data to NBI. All Customer Personal Data provided by the RSP to the NBI shall be accurate and up to date. 5.2. The RSP acknowledges that NBI is reliant on the RSP for lawful instruction as to the extent of the NBI’s processing of Customer Personal Data and accordingly the RSP agrees to provide clear written instructions in a timely manner to NBI, which shall at all times be in compliance with the Data Protection Laws. 5.3. Notwithstanding clause Clause 5.2 above, NBI retains the discretion to refuse any such instruction received if, in NBI’s reasonable opinion, such instruction infringes the Data Protection Laws or any other applicable law. In such circumstances, NBI shall notify in writing the RSP of same, including the reasons underlying its opinion. 5.4. As regards access to the NBI Operational Environment, the RSP shall ensure that its staff, employees, contractors and all other personnel authorised to access NBI Operational Environment, shall ensure the security and confidentiality of all passwords, credentials and access codes. The RSP shall maintain an up to date list of all persons authorised by it to access, upload and download data to and from the NBI Operational Environment.