Common use of Monitoring and Review Clause in Contracts

Monitoring and Review. 15.1. The Parties shall monitor and review on an ongoing basis the sharing of Relevant Information to ensure compliance with Information Law and best practice. Specific monitoring requirements are set out in the Personal Data Agreement annexed to this Agreement. Data flow duration: The duration of the delegation arrangement [OR Insert alternative period] Nature and purpose of processing: Described in the Delegation Agreement at Schedule 4 paragraph Originating Data Controller [Insert:] Recipient Data Controller [Insert:] Comprehensive description of Relevant Information to be shared – including the type(s) of personal data to be shared and categories of personal data [Insert:] Justification for the level of identifiability required [Insert or N/A:] GDPR Article 6 Legitimising Condition/s [Insert or N/A:] GDPR Article 9 Exemption/s [Insert or N/A:] Confidentiality Explicit consent Yes / No [If yes, how documented?:] Implied Consent Yes / No [If yes, how have you implied consent?:] Statutory required/permitted disclosure [Insert statutory basis:] Public interest disclosure [Insert how the public interest favours use/disclosure of the information:] Other legal basis [Insert:]

Monitoring and Review. 15.1. The Parties shall monitor and review on an ongoing basis the sharing of Relevant Information to ensure compliance with Information Law and best practice. Specific monitoring requirements are set out in the Personal Data Agreement annexed to this Agreement. Data flow duration: The duration of the delegation arrangement [OR Insert alternative period] Nature and purpose of processing: Described in the Delegation Agreement at Schedule 4 paragraph Originating Data Controller [Insert:] Recipient Data Controller [Insert:] Comprehensive description of Relevant Information to be shared – including the type(s) of personal data to be shared and categories of personal data [Insert:] Justification for the level of identifiability required [Insert or N/A:] GDPR Article 6 Legitimising Condition/s 6 [Insert or N/A:] GDPR Article 9 Exemption/s 9 [Insert or N/A:] Confidentiality Explicit consent Yes / No [If yes, how documented?:] Implied Consent Yes / No [If yes, how have you implied consent?:] Statutory disclosure required/permitted disclosure [Insert statutory basis:] Public interest disclosure [Insert how the public interest favours use/disclosure information:] interest of the information:] Other legal basis [Insert:]

Monitoring and Review. 15.1. The Parties shall monitor and review on an ongoing basis the sharing of Relevant Information to ensure compliance with Information Law and best practice. Specific monitoring requirements are set out in the attached Personal Data Agreement annexed to this Agreement. Data flow duration: The duration of the delegation arrangement [OR Insert alternative period] Nature and purpose of processing: Described in the Delegation Agreement at Schedule 4 paragraph Originating Data Controller [Insert:] Recipient Data Controller [Insert:] Comprehensive description of Relevant Information to be shared – including the type(s) of personal data to be shared and categories of personal data [Insert:] Justification for the level of identifiability required [Insert or N/A:] GDPR Article 6 Legitimising Condition/s [Insert or N/A:] GDPR Article 9 Exemption/s Legitimising Conditions [Insert or N/A:] Confidentiality Explicit consent Yes / No [If yes, how documented?:] Implied Consent Yes / No [If yes, how have you implied consent?:] Statutory required/permitted disclosure [Insert statutory basis:] Public interest disclosure [Insert how the public interest favours use/disclosure of the information:] Other legal basis [Insert:]

Monitoring and Review. 15.1. The Parties shall monitor and review on an ongoing basis the sharing of Relevant Information to ensure compliance with Information Law and best practice. Specific monitoring requirements are set out in the attached Personal Data Agreement annexed to this Agreement. Data flow duration: The duration of the delegation arrangement [OR Insert alternative period] Nature and purpose of processing: Described in the Delegation Agreement at Schedule 4 paragraph Originating Data Controller [Insert:] Recipient Data Controller [Insert:] Comprehensive description of Relevant Information to be shared – including the type(s) of personal data to be shared and categories of personal data [Insert:] Justification for the level of identifiability required [Insert or N/A:] GDPR Article 6 Legitimising Condition/s [Insert or N/A:] GDPR Article 9 Exemption/s Legitimising Conditions [Insert or N/A:] Confidentiality Explicit consent Yes / No [If yes, how documented?:] Implied Consent Yes / No [If yes, how have you implied consent?:] Statutory required/permitted disclosure [Insert statutory basis:] Public interest disclosure [Insert how the public interest favours use/disclosure of the information:] Other legal basis [Insert:]

Monitoring and Review. 15.1. The Parties shall monitor and review on an ongoing basis the sharing of Relevant Information to ensure compliance with Information Law and best practice. Specific monitoring requirements are set out in the Personal Data Agreement annexed to this Agreement. Data flow duration: The duration of the delegation arrangement [OR Insert alternative period] Nature and purpose of processing: Described in the Delegation Agreement at Schedule 4 paragraph Originating Data Controller [Insert:] Recipient Data Controller [Insert:] Comprehensive description of Relevant Information to be shared – including the type(s) of personal data to be shared and categories of personal data [Insert:] Justification for the level of identifiability required [Insert or N/A:] GDPR Article 6 Legitimising Condition/s [Insert or N/A:] GDPR Article 9 Exemption/s [Insert or N/A:] Confidentiality Explicit consent Yes / No [If yes, how documented?:] Implied Consent Yes / No [If yes, how have you implied consent?:] Statutory required/permitted disclosure [Insert statutory basis:] Public interest disclosure [Insert how the public interest favours use/disclosure of the information:] Other legal basis [Insert:]

Monitoring and Review. 15.1. The Parties shall monitor and review on an ongoing basis the sharing of Relevant Information to ensure compliance with Information Law and best practice. Specific monitoring requirements are set out in the attached Personal Data Agreement annexed to this Agreement. Data flow duration: The duration of the delegation arrangement [OR Insert alternative period] Nature and purpose of processing: Described in the Delegation Agreement at Schedule 4 paragraph Originating Data Controller [Insert:] Recipient Data Controller [Insert:] Comprehensive description of Relevant Information to be shared – including the type(s) of personal data to be shared and categories of personal data [Insert:] Justification for the level of identifiability required [Insert or N/A:] GDPR Article 6 Legitimising Condition/s [Insert or N/A:] GDPR Article 9 Exemption/s Legitimising Conditions [Insert or N/A:] Confidentiality Explicit consent Yes / No [If yes, how documented?:] Implied Consent Yes / No [If yes, how have you implied consent?:] Statutory required/permitted disclosure [Insert statutory basis:] Public interest disclosure [Insert how the public interest favours use/disclosure of the information:] Other legal basis [Insert:]