Common use of Privacy & Security Clause in Contracts

Privacy & Security. Supplier will fully comply with all applicable privacy and security Laws. To the extent applicable, Supplier warrants, represents and undertakes if it processes Personal Data on Xxxxx’x behalf, that: (i) it will notify Xxxxx immediately, and in any event within 24 hours of becoming aware, of any actual or suspected Personal Data Breach; (ii) it will act only upon Xxxxx’x instructions with respect to Personal Data; (iii) it has in place appropriate measures against the unauthorized, unlawful or accidental processing, access, loss or destruction of such Personal Data; and (iv) it will not, without Xxxxx’x permission, transmit Personal Data outside of the country wherein the Xxxxx entity with whom Supplier is contracting is located. For purposes of this Clause 10, applicable privacy and security laws mean and include all applicable Laws protecting the personal data and privacy of natural persons, including in particular, the European General Data Protection Regulation 2016/679 ("GDPR") and its implementing national data protection laws as well as any subsequent applicable legislation that may amend or replace, re-enact or consolidate any of them; and the terms “Personal Data” and “Personal Data Breach” have the same meaning as under the GDPR.