Common use of OBLIGATIONS OF THE DATA CONTROLLER Clause in Contracts

OBLIGATIONS OF THE DATA CONTROLLER. 5.1 The Data Controller is responsible for the lawful basis for the processing of personal data, in particular with Schedule 1 of the Data Protection Act 2018. 5.2 The Data Controller must use accuRx or another safe communications channel to communicate Personal Data and/or Special Categories of Personal Data to the Data Processor. The security of the channel used must correspond to the privacy risk involved. 5.3 The Data Controller must accept responsibility for use of content that it produces. 5.4 The Data Controller is responsible for the validity of any mobile numbers or emails entered by the Data Controller's staff. 5.5 The Data Controller must not rely on accuRx for the communication of vital information. SMS messages should only be used to support and enhance communication. accuRx provide no guarantees or assurances that SMS messages have been delivered or read by the recipient. 5.6 The instructions given by the Data Controller to the Data Processor in respect of the Personal Data/Special Categories of Personal Data disclosed to it by patients of the Data Controller or generated in respect of such patients shall at all times be in accordance with the laws of England and Wales. 5.8 The Data Controller must ensure that all data fields in accuRx are correctly filled in and do not contain patient identifiable information where they are not supposed to. 5.9 The Data Controller, by entering into this Agreement, instructs the Data Processor to process the Personal Data/Special Categories of Personal Data on its behalf for the purpose of providing the Services, including the purpose of usage data reports in anonymised form. 5.10 The Data Controller, by entering into this Agreement, instructs the Data Processor to engage in reasonable monitoring of messages to prevent abuse, fraud or harm to patients through technical or user errors. This monitoring shall be proportionate and carried out through a person acting as a clinical lead.

OBLIGATIONS OF THE DATA CONTROLLER. 5.1 The Data Controller is responsible for the lawful basis for the processing of personal data, in particular with Schedule 1 of the Data Protection Act 2018Xxx 0000. 5.2 The Data Controller must use accuRx or another safe communications channel to communicate Personal Data and/or Special Categories of Personal Data to the Data Processor. The security of the channel used must correspond to the privacy risk involved. 5.3 The Data Controller must accept responsibility for use of content that it produces. 5.4 The Data Controller is responsible for the validity of any mobile numbers or emails entered by the Data Controller's staff. 5.5 The Data Controller must not rely on accuRx for the communication of vital information. SMS messages should only be used to support and enhance communication. accuRx provide no guarantees or assurances that SMS messages have been delivered or read by the recipient. 5.6 The instructions given by the Data Controller to the Data Processor in respect of the Personal Data/Special Categories of Personal Data disclosed to it by patients of the Data Controller or generated in respect of such patients shall at all times be in accordance with the laws of England and Wales. 5.8 The Data Controller must ensure that all data fields in accuRx are correctly filled in and do not contain patient identifiable information where they are not supposed to. 5.9 The Data Controller, by entering into this Agreement, instructs the Data Processor to process the Personal Data/Special Categories of Personal Data on its behalf for the purpose of providing the Services, including the purpose of usage data reports in anonymised form. 5.10 The Data Controller, by entering into this Agreement, instructs the Data Processor to engage in reasonable monitoring of messages to prevent abuse, fraud or harm to patients through technical or user errors. This monitoring shall be proportionate and carried out through a person acting as a clinical lead.

OBLIGATIONS OF THE DATA CONTROLLER. 5.1 The Data Controller is responsible for the lawful basis for the processing of personal data, in particular with Schedule 1 of the Data Protection Act 2018Xxx 0000. 5.2 The Data Controller must use accuRx AccuRx or another safe communications channel to communicate Personal Data and/or Special Categories of Personal Data to the Data Processor. The security of the channel used must correspond to the privacy risk involved. 5.3 The Data Controller must accept responsibility for use of content that it produces. 5.4 The Data Controller is responsible for the validity of any mobile numbers or emails entered by the Data Controller's staff. 5.5 The Data Controller must not rely on accuRx AccuRx for the communication of vital information. SMS messages should only be used to support and enhance communication. accuRx AccuRx provide no guarantees or assurances that SMS messages have been delivered or read by the recipient. 5.6 The instructions given by the Data Controller to the Data Processor in respect of the Personal Data/Special Categories of Personal Data disclosed to it by patients of the Data Controller or generated in respect of such patients shall at all times be in accordance with the laws of England and Walesthe United Kingdom. 5.8 The Data Controller must ensure that all data fields in accuRx AccuRx are correctly filled in and do not contain patient identifiable information where they are not supposed to. 5.9 The Data Controller, by entering into this Agreement, instructs the Data Processor to process the Personal Data/Special Categories of Personal Data on its behalf for the purpose of providing the Services, including the purpose of usage data reports in anonymised form. 5.10 The Data Controller, by entering into this Agreement, instructs the Data Processor to engage in reasonable monitoring of messages to prevent abuse, fraud or harm to patients through technical or user errors. This monitoring shall be proportionate and carried out through a person acting as a clinical lead.