Data Protection and off-shoring I. 1 The Processor shall, in relation to any Personal Data processed in connection with its obligations under the Agreement: I.1.1 not process or permit to be processed Personal Data outside of the United Kingdom unless the prior written consent (which means explicit consent obtained in writing or documented instructions (which means the provision of instructions via configuration tools such as the Supplier management console and APIs made available by the Supplier for the Services) in each case received after the date on which the Agreement is signed) of the Controller has been obtained or to the extent required to provide Services outside of the United Kingdom where the Controller actively selects a Supplier region outside of the United Kingdom, and the following conditions are fulfilled: (a) the Controller or the Processor has provided appropriate safeguards in relation to the processing (whether in accordance with GDPR Article 46 or LED Article 37) as determined by the Controller; (b) the Data Subject has enforceable rights and effective legal remedies; (c) the Processor complies with its obligations under the Data Protection Legislation by providing an adequate level of protection to any Personal Data that is processed (or, if it is not so bound, uses its best endeavours to assist the Controller in meeting its obligations); and (d) the Processor complies with any reasonable instructions notified to it in advance by the Controller with respect to the processing of the Personal Data; I.2 Failure by the Processor to comply with the obligations set out in Clause I.1 shall allow the Authority to terminate the Agreement pursuant to the clause that provides the Authority the right to terminate the Agreement for Supplier fault (termination for Supplier cause or equivalent clause). J.
