Common use of Data Protection and Data Security Clause in Contracts

Data Protection and Data Security. 6.1. The User acknowledges the need to manage data security and risks around use of data appropriately, both to protect the rights of individual data subjects and to avoid reputational, relationship and commercial risks to HESA, HESA Services and the Organisation arising from any perceived breach or inadequacy in the protection and security of data collected by HESA which could impede the ability of HESA, HESA Services and the Organisation to access data in the future. 6.2. The User agrees that in connection with the provision or use of Xxxxx Plus Data which relates to individuals it will at all times: 6.2.1. Comply with the DP Act including without limitation the data protection principles set out in the DP Act; and 6.2.2. Fully co-operate with HESA, HESA Services and the Organisation to enable HESA, HESA Services and/or the Organisation to comply with their obligations under the DP Act. 6.3. The User is referred to clause 8 of the Organisational Agreement and is required to comply with all restrictions in that clause or notified to it by the Organisation for the purposes of ensuring compliance with that clause. 6.4. The User is required to take reasonable steps to prevent access to Xxxxx Plus Data being obtained by unauthorised individuals (being individuals who are not authorised through an Authorised User Agreement to access the relevant type or level of Xxxxx Plus Data). The User will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 6.5. The User has a duty to inform the Organisation's other Lead Contact immediately of any breach or possible breach of this Agreement, in particular any breach of clause 5 or this clause 6. 6.6. By entering into this Agreement the User gives HESA, HESA Services and the Organisation consent to use of their Personal Data for the purposes of administering this Agreement and the purposes of monitoring or ensuring compliance with this Agreement and the DP Act.

Data Protection and Data Security. 6.15.1. The User acknowledges the need to manage data security and risks around use of data appropriately, both to protect the rights of individual data subjects and to avoid reputational, relationship and commercial risks to HESA, HESA Services and the Organisation arising from any perceived breach or inadequacy in the protection and security of data collected by HESA which could impede the ability of HESA, HESA Services and the Organisation to access data in the future. 6.25.2. The User agrees that in connection with the provision or use of Xxxxx Plus Data which relates to individuals it will at all times: 6.2.15.2.1. Comply with the DP Act including without limitation the data protection principles set out in the DP Act; and 6.2.25.2.2. Fully co-operate with HESA, HESA Services and the Organisation to enable HESA, HESA Services and/or the Organisation to comply with their obligations under the DP Act. 6.35.3. The User is referred to clause 8 of the Organisational Agreement and is required to comply with all restrictions in that clause or notified to it by the Organisation for the purposes of ensuring compliance with that clause. 6.45.4. The User is required to take reasonable steps to prevent access to Xxxxx Plus Data being obtained by unauthorised individuals (being individuals who are not authorised through an Authorised User Agreement to access the relevant type or level of Xxxxx Plus Data). The User will ensure that they log out or lock devices through which they are accessing Xxxxx Plus when not present and keep information extracted from Xxxxx Plus and printed materials generated from Xxxxx Plus secure. 6.55.5. The User has a duty to inform the Organisation's other Lead Contact immediately of any breach or possible breach of this Agreement, in particular any breach of clause 5 4 or this clause 65. 6.65.6. By entering into this Agreement the User gives HESA, HESA Services and the Organisation consent to use of their Personal Data for the purposes of administering this Agreement and the purposes of monitoring or ensuring compliance with this Agreement and the DP Act.