Common use of Deletion or return of Controller Personal Data Clause in Contracts

Deletion or return of Controller Personal Data. 10.1 Subject to sections 10.2 and 10.3 Processor and each Processor Affiliate shall (and shall procure that each relevant Contracted Processor), after the date of cessation of any Services involving the Processing of Controller Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Controller Personal Data without undue delay. 10.2 Subject to section 10.3 prior to the Cessation Date as set out in section 10.1, Controller may in its absolute discretion by written notice to Processor require Processor and each Processor Affiliate to (a) return a complete copy of all Controller Personal Data to Controller by secure file transfer in such format as is reasonably agreed upon between Processor and Controller and the Processor shall procure the return of all copies by any relevant Contracted Processor of those Controller Personal Data. 10.3 Each Contracted Processor may retain Controller Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that any relevant Contracted Processor shall ensure the confidentiality of all such Controller Personal Data and shall, in accordance with Applicable Laws, take reasonable steps to ensure that such Controller Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Law requiring its storage and for no other purpose. 10.4 After the Cessation Date, upon written request by Controller, Processor shall provide written certification to Controller that it and each relevant Contracted Processor has fully complied with this section 10 within 90 days of such written request.

Deletion or return of Controller Personal Data. 10.1 9.1 Subject to sections 10.2 9.2 and 10.3 9.3, the Processor shall promptly and each Processor Affiliate shall in any event within seven (and shall procure that each relevant Contracted Processor), after 7) days of the date of cessation of any Services involving the Processing of Controller Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Controller Personal Data without undue delayData. 10.2 9.2 Subject to section 10.3 prior to 9.3, the Cessation Date as set out in section 10.1, Controller may in its absolute discretion by written notice to the Processor within seven (7) days of the Cessation Date require the Processor and each Processor Affiliate to (a) return a complete copy of all Controller Personal Data to the Controller by secure file transfer in such format as is reasonably agreed upon between Processor notified by the Controller to the Processor; and (b) delete and procure the deletion of all other copies of Controller and the Personal Data Processed by any Contracted Processor. The Processor shall procure comply with any such written request within seven (7) days of the return of all copies by any relevant Contracted Processor of those Controller Personal DataCessation Date. 10.3 9.3 Each Contracted Processor may retain Controller Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that any relevant Contracted the Processor shall ensure the confidentiality of all such Controller Personal Data and shall, in accordance with Applicable Laws, take reasonable steps to shall ensure that such Controller Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Law Laws requiring its storage and for no other purpose. 10.4 After the Cessation Date, upon written request by Controller, 9.4 The Processor shall provide written certification to the Controller that it and each relevant Contracted Processor has fully complied with this section 10 9 within 90 fourteen (14) days of such written requestthe Cessation Date.