Data Protection Impact Assessment If, pursuant to Data Protection Law, Customer (or its Controllers) are required to perform a data protection impact assessment or prior consultation with a regulator, at Customer’s request, SAP will provide such documents as are generally available for the Cloud Service (for example, this DPA, the Agreement, audit reports or certifications). Any additional assistance shall be mutually agreed between the Parties.
Data Protection Impact Assessment and Prior Consultation Processor shall provide reasonable assistance to the Company with any data protection impact assessments, and prior consultations with Supervising Authorities or other competent data privacy authorities, which Company reasonably considers to be required by article 35 or 36 of the GDPR or equivalent provisions of any other Data Protection Law, in each case solely in relation to Processing of Company Personal Data by, and taking into account the nature of the Processing and information available to, the Contracted Processors.
Impact Assessment If Service Provider desires to make any change, upgrade, replacement or addition that may have an adverse impact or require changes as described in Section 9.6(c) or increase the risk of Service Provider not being able to provide the Services in accordance with this Agreement or violate or be inconsistent with DIR Standards or Strategic Plans, then Service Provider shall prepare a written risk assessment and mitigation plan (1) describing in detail the nature and extent of such adverse impact or risk, (2) describing any benefits, savings or risks to DIR or the DIR Customers associated with such change, and (3) proposing strategies to mitigate any adverse risks or impacts associated with such change and, after consultation and agreement with DIR, implement the plan.