Common use of PROVIDER PERSONNEL Clause in Contracts

PROVIDER PERSONNEL. 7.1 The Provider shall take all reasonable steps to ensure the reliability and integrity of all Provider Personnel who have access to Personal Data and shall ensure that it takes all reasonable steps to ensure the reliability and integrity of any Provider Personnel who have access to the Personal Data and ensure that they: (a) are aware of and comply with the Provider’s duties under this clause; (b) are subject to appropriate confidentiality undertakings with the Provider or any Sub-Contractor; (c) are informed of the confidential nature of the Personal Data and do not publish, disclose or divulge any of the Personal Data to any third Party unless directed in writing to do so by the Council or as otherwise permitted by this Agreement; and (d) have undergone adequate training in the use, care, protection and handling of Personal Data; 7.2 The Provider shall ensure that Provider Personnel : 7.2.1 receive information security training on induction and annual refresher training; 7.2.2 are aware of the controls the Provider has established for the protection of Personal Data at rest or in transit; in physical and electronic format, stored in both secure and non-secure locations and of the Provider’s procedure for the reporting and management of security incidents; 7.3 The Provider shall ensure that only such of the Provider Personnel who may assist in carrying out its obligations under this Agreement shall have access to Personal Data and that such Provider Personnel have been vetted in line with Good Industry Practice and in accordance with any specific requirements of the Council. 7.4 The Provider shall ensure that none of the Provider Personnel used to carry out the services disclose any Personal Data to any third party except where expressly authorised to do so for the delivery of the services and as specified in Schedule 2. 7.5 Save as provided in clause 7.4, the Provider shall ensure that none of the Provider Personnel publish, disclose or divulge any Personal Data to a third party unless instructed to do so in writing by the Council.

PROVIDER PERSONNEL. 7.1 The Provider shall take all reasonable steps to ensure the reliability and integrity of all Provider Personnel who have access to Personal Data and shall ensure that it takes all reasonable steps to ensure the reliability and integrity of any Provider Personnel who have access to the Personal Data and ensure that they: (a) are aware of and comply with the Provider’s duties under this clause; (b) are subject to appropriate confidentiality undertakings with the Provider or any Sub-Contractor; (c) are informed of the confidential nature of the Personal Data and do not publish, disclose or divulge any of the Personal Data to any third Party unless directed in writing to do so by the Council or as otherwise permitted by this Agreement; and (d) have undergone adequate training in the use, care, protection and handling of Personal Data; 7.2 The Provider shall ensure that Provider Personnel :Personnel 7.2.1 receive information security training on induction and annual refresher training; 7.2.2 are aware of the controls the Provider has established for the protection of Personal Data at rest or in transit; in physical and electronic format, stored in both secure and non-secure locations and of the Provider’s procedure for the reporting and management of security incidents; 7.3 The Provider shall ensure that only such of the Provider Personnel who may assist in carrying out its obligations under this Agreement shall have access to Personal Data and that such Provider Personnel have been vetted in line with Good Industry Practice and in accordance with any specific requirements of the Council. 7.4 The Provider shall ensure that none of the Provider Personnel used to carry out the services disclose any Personal Data to any third party except where expressly authorised to do so for the delivery of the services and as specified in Schedule 2. 7.5 Save as provided in clause 7.4, the Provider shall ensure that none of the Provider Personnel publish, disclose or divulge any Personal Data to a third party unless instructed to do so in writing by the Council.