Common use of Data Protection and Data Security Clause in Contracts

Data Protection and Data Security. 5.1 The Authorised User acknowledges the need to manage data security and risks around use of data appropriately, both to protect the rights of individual data subjects and to avoid reputational, relationship and commercial risks to HESA, HESA Services and the Organisation arising from any perceived breach or inadequacy in the protection and security of data collected by HESA which could impede the ability of HESA, HESA Services and the Organisation to access data in the future. 5.2 The Authorised User agrees that in connection with the provision or use of Xxxxx Plus Data which relates to individuals it will at all times: 5.2.1 Comply with the DP Legislation including without limitation the data protection principles set out in the DP Legislation; and 5.2.2 Fully co-operate with HESA, HESA Services and the Organisation to enable HESA, HESA Services and/or the Organisation to comply with their obligations under the DP Legislation. 5.3 The Authorised User is referred to clause 8 of the Organisational Agreement and is required to comply with all restrictions in that clause or notified to it by the Organisation for the purposes of ensuring compliance with that clause. 5.4 The Authorised User is required to take reasonable steps to prevent access to Xxxxx Plus Data being obtained by unauthorised individuals (being individuals who are not authorised through an Authorised User Agreement to access the relevant type or level of Xxxxx Plus Data). In particular, the Authorised User will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 5.5 In relation to Unrounded Data extracted and held by the Authorised User either in electronic or in hard copy form, maintain appropriate security measures with a view to preventing those materials from being accessed or viewed by unauthorised individuals (whether deliberately or inadvertently). Such measures will include but are not limited to: 5.5.1 only generating and retaining such extracts or copies of Xxxxx Plus Data to the extent necessary and proportionate for the Permitted Uses; 5.5.2 keeping under regular review the continuing need to retain such extracts or copies for the Permitted Uses and promptly ensuring the permanent secure deletion or destruction of such extracts or copies when the Authorised User determines that retention is no longer necessary or proportionate for the Permitted Uses; 5.5.3 not leaving such information or materials unattended on the Authorised User's desk or in any other area which is open to or readily accessible by unauthorised individuals; 5.5.4 ensuring that electronic copies or extracts of Xxxxx Plus Data are held within a system or on hardware which is subject to appropriate data security protections, in accordance with the DP Legislation and the Organisation's information security policies, and in a manner which restricts access only to the Organisation’s Gold Users and Lead Contacts who need to access the Unrounded Data for the Permitted Uses; and 5.5.5 ensuring that such information or materials and are not visible or readily accessible during transportation. 5.6 The Authorised User has a duty to inform the Lead Contact immediately of any breach or possible breach of this Agreement, in particular any breach of clause 4 or this clause 5. 5.7 The Authorised User understands that HESA, HESA Services and the Organisation will use their Personal Data for the purposes of administering this Agreement and monitoring or ensuring compliance with this Agreement and the DP Legislation.

Data Protection and Data Security. 5.1 6.1. The Authorised User Lead Contact acknowledges the need to manage data security and risks around use of data appropriately, both to protect the rights of individual data subjects and to avoid reputational, relationship and commercial risks to HESA, HESA Services and the Organisation arising from any perceived breach or inadequacy in the protection and security of data collected by HESA which could impede the ability of HESA, HESA Services and the Organisation to access data in the future. 5.2 6.2. The Authorised User Lead Contact agrees that in connection with the provision or use of Xxxxx Plus Data which relates to individuals it will at all times: 5.2.1 6.2.1. Comply with the DP Legislation including without limitation the data protection principles set out in the DP Legislation; and 5.2.2 6.2.2. Fully co-operate with HESA, HESA Services and the Organisation to enable HESA, HESA Services and/or the Organisation to comply with their obligations under the DP Legislation. 5.3 6.3. The Authorised User Lead Contact is referred to clause 8 of the Organisational Agreement and is required to comply with all restrictions in that clause or notified to it by the Organisation for the purposes of ensuring compliance with that clause. 5.4 6.3.1. The Authorised User Lead Contact is required to take reasonable steps to prevent access to Xxxxx Plus Data being obtained by unauthorised individuals (being individuals who are not authorised through an Authorised User Agreement to access the relevant type or level of Xxxxx Plus Data). In particular, the Authorised User Lead Contact will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 5.5 In in relation to Unrounded Data extracted and held by the Authorised User Lead Contact either in electronic or in hard copy form, maintain appropriate security measures with a view to preventing those materials from being accessed or viewed by unauthorised individuals (whether deliberately or inadvertently). Such measures will include but are not limited to: 5.5.1 6.3.1.1 only generating and retaining such extracts or copies of Xxxxx Plus Data to the extent necessary and proportionate for the Permitted Uses; 5.5.2 6.3.1.2 keeping under regular review the continuing need to retain such extracts or copies for the Permitted Uses and promptly ensuring the permanent secure deletion or destruction of such extracts or copies when the Authorised User Lead Contact determines that retention is no longer necessary or proportionate for the Permitted Uses; 5.5.3 6.3.1.3 not leaving such information or materials unattended on the Authorised UserLead Contact's desk or in any other area which is open to or readily accessible by unauthorised individuals; 5.5.4 6.3.1.4 ensuring that electronic copies or extracts of Xxxxx Plus Data are held within a system or on hardware which is subject to appropriate data security protections, in accordance with the DP Legislation and the Organisation's information security policies, and in a manner which restricts access only to the Organisation’s Gold Users and Lead Contacts Contact Users who need to access the Unrounded Data for the Permitted Uses; and 5.5.5 6.3.1.5 ensuring that such information or materials and are not visible or readily accessible during transportation. 5.6 6.3.2. The Authorised User Lead Contact will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 6.3.3. The Lead Contact has a duty to inform the Organisation's other Lead Contact immediately of any breach or possible breach of this Agreement, in particular any breach of clause 4 5 or this clause 56. 5.7 The Authorised User understands that 6.3.4. By entering into this Agreement, the Lead Contact gives HESA, HESA Services and the Organisation will consent to use their Personal Data for the purposes of administering this Agreement and the purposes of monitoring or ensuring compliance with this Agreement and the DP Legislation.

Data Protection and Data Security. 5.1 6.1. The Authorised User Lead Contact acknowledges the need to manage data security and risks around use of data appropriately, both to protect the rights of individual data subjects and to avoid reputational, relationship and commercial risks to HESA, HESA Services and the Organisation arising from any perceived breach or inadequacy in the protection and security of data collected by HESA which could impede the ability of HESA, HESA Services and the Organisation to access data in the future. 5.2 6.2. The Authorised User Lead Contact agrees that in connection with the provision or use of Xxxxx Plus Data which relates to individuals it will at all times: 5.2.1 6.2.1. Comply with the DP Legislation including without limitation the data protection principles set out in the DP Legislation; and 5.2.2 6.2.2. Fully co-operate with HESA, HESA Services and the Organisation to enable HESA, HESA Services and/or the Organisation to comply with their obligations under the DP Legislation. 5.3 6.3. The Authorised User Lead Contact is referred to clause 8 of the Organisational Agreement and is required to comply with all restrictions in that clause or notified to it by the Organisation for the purposes of ensuring compliance with that clause. 5.4 6.4. The Authorised User Lead Contact is required to take reasonable steps to prevent access to Xxxxx Plus Data being obtained by unauthorised individuals (being individuals who are not authorised through an Authorised User Agreement to access the relevant type or level of Xxxxx Plus Data). In particular, the Authorised User Lead Contact will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 5.5 In in relation to Unrounded Data extracted and held by the Authorised User Lead Contact either in electronic or in hard copy form, maintain appropriate security measures with a view to preventing those materials from being accessed or viewed by unauthorised individuals (whether deliberately or inadvertently). Such measures will include but are not limited to: 5.5.1 6.4.1 only generating and retaining such extracts or copies of Xxxxx Plus Data to the extent necessary and proportionate for the Permitted Uses; 5.5.2 6.4.2 keeping under regular review the continuing need to retain such extracts or copies for the Permitted Uses and promptly ensuring the permanent secure deletion or destruction of such extracts or copies when the Authorised User Lead Contact determines that retention is no longer necessary or proportionate for the Permitted Uses; 5.5.3 6.4.3 not leaving such information or materials unattended on the Authorised UserLead Contact's desk or in any other area which is open to or readily accessible by unauthorised individuals; 5.5.4 6.4.4 ensuring that electronic copies or extracts of Xxxxx Plus Data are held within a system or on hardware which is subject to appropriate data security protections, in accordance with the DP Legislation and the Organisation's information security policies, and in a manner which restricts access only to the Organisation’s Gold Users and Lead Contacts Contact Users who need to access the Unrounded Data for the Permitted Uses; and 5.5.5 6.4.5 ensuring that such information or materials and are not visible or readily accessible during transportation. 5.6 6.5. The Authorised User Lead Contact will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 6.6. The Lead Contact has a duty to inform the Organisation's other Lead Contact immediately of any breach or possible breach of this Agreement, in particular any breach of clause 4 5 or this clause 56. 5.7 The Authorised User understands that 6.7. By entering into this Agreement, the Lead Contact gives HESA, HESA Services and the Organisation will consent to use their Personal Data for the purposes of administering this Agreement and the purposes of monitoring or ensuring compliance with this Agreement and the DP Legislation.

Data Protection and Data Security. 5.1 5.1. The Authorised User acknowledges the need to manage data security and risks around use of data appropriately, both to protect the rights of individual data subjects and to avoid reputational, relationship and commercial risks to HESA, HESA Services and the Organisation arising from any perceived breach or inadequacy in the protection and security of data collected by HESA which could impede the ability of HESA, HESA Services and the Organisation to access data in the future. 5.2 5.2. The Authorised User agrees that in connection with the provision or use of Xxxxx Plus Data which relates to individuals it will at all times: 5.2.1 5.2.1. Comply with the DP Legislation including without limitation the data protection principles set out in the DP Legislation; and 5.2.2 5.2.2. Fully co-operate with HESA, HESA Services and the Organisation to enable HESA, HESA Services and/or the Organisation to comply with their obligations under the DP Legislation. 5.3 5.3. The Authorised User is referred to clause 8 of the Organisational Agreement and is required to comply with all restrictions in that clause or notified to it by the Organisation for the purposes of ensuring compliance with that clause. 5.4 5.3.1. The Authorised User is required to take reasonable steps to prevent access to Xxxxx Plus Data being obtained by unauthorised individuals (being individuals who are not authorised through an Authorised User Agreement to access the relevant type or level of Xxxxx Plus Data). In particular, the Authorised User will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 5.5 5.3.2. In relation to Unrounded Data extracted and held by the Authorised User either in electronic or in hard copy form, maintain appropriate security measures with a view to preventing those materials from being accessed or viewed by unauthorised individuals (whether deliberately or inadvertently). Such measures will include but are not limited to: 5.5.1 5.3.2.1. only generating and retaining such extracts or copies of Xxxxx Plus Data to the extent necessary and proportionate for the Permitted Uses; 5.5.2 5.3.2.2. keeping under regular review the continuing need to retain such extracts or copies for the Permitted Uses and promptly ensuring the permanent secure deletion or destruction of such extracts or copies when the Authorised User determines that retention is no longer necessary or proportionate for the Permitted Uses; 5.5.3 5.3.2.3. not leaving such information or materials unattended on the Authorised User's desk or in any other area which is open to or readily accessible by unauthorised individuals; 5.5.4 5.3.2.4. ensuring that electronic copies or extracts of Xxxxx Plus Data are held within a system or on hardware which is subject to appropriate data security protections, in accordance with the DP Legislation and the Organisation's information security policies, and in a manner which restricts access only to the Organisation’s Gold Users and Lead Contacts Contact Users who need to access the Unrounded Data for the Permitted Uses; and 5.5.5 5.3.2.5. ensuring that such information or materials and are not visible or readily accessible during transportation. 5.6 5.3.3. The Authorised User has a duty to inform the Lead Contact immediately of any breach or possible breach of this Agreement, in particular any breach of clause 4 or this clause 5. 5.7 5.3.4. The Authorised User understands that HESA, HESA Services and the Organisation will use their Personal Data for the purposes of administering this Agreement and monitoring or ensuring compliance with this Agreement and the DP Legislation.