Common use of SECURITY AND TRAINING Clause in Contracts

SECURITY AND TRAINING. 12.1 The Data Processor agrees to implement appropriate technological and organisational measures to prevent; • unauthorised or unlawful processing of the Personal Data; and • the accidental loss or destruction of, or damage to, the Personal Data • ensure a level of security appropriate to: • the harm that might result from such unauthorised or unlawful processing or accidental loss, destruction or damage; and • the nature of the Personal Data to be protected. 12.2 Specifically, the Data Processor agrees to implement the technological and organisational security measures described in Schedule 3. The Data Processor agrees to notify the Data Controller of any material change to the measures as described in Schedule 3. 12.3 It is the responsibility of each Party to ensure that its staff members are appropriately trained to handle and process the Personal Data in accordance with the technical and organisational security measures set out in Schedule 3 together with any other applicable national data protection laws and guidance. 12.4 The level, content and regularity of training referred to in clause 11.3 shall be proportionate to the staff members' role, responsibility and frequency with respect to their handling and processing of the Personal Data.

SECURITY AND TRAINING. 12.1 The Data Processor agrees to implement appropriate technological and organisational measures to prevent; • unauthorised Unauthorised or unlawful processing of the Personal Data; and • the The accidental loss or destruction of, or damage to, the Personal Data • ensure a level of security appropriate to: • the The harm that might result from such unauthorised or unlawful processing or accidental loss, destruction or damage; and • the The nature of the Personal Data to be protected. 12.2 Specifically, the Data Processor agrees to implement the technological and organisational security measures described in Schedule 3. The Data Processor agrees to notify the Data Controller of any material change to the measures as described in Schedule 3. 12.3 It is the responsibility of each Party to ensure that its staff members are appropriately trained to handle and process the Personal Data in accordance with the technical and organisational security measures set out in Schedule 3 together with any other applicable national data protection laws and guidance. 12.4 The level, content and regularity of training referred to in clause 11.3 shall be proportionate to the staff members' role, responsibility and frequency with respect to their handling and processing of the Personal Data.

SECURITY AND TRAINING. 12.1 9.1 The Data Processor agrees to implement appropriate technological and organisational measures to prevent; • unauthorised or unlawful processing of the Personal Data; and • the accidental loss or destruction of, or damage to, the Personal Data • The Data Processor will ensure a level of security appropriate to: • the harm that might result from such unauthorised or unlawful processing or accidental loss, destruction or damage; and • the nature of the Personal Data to be protected. 12.2 9.2 Specifically, the Data Processor agrees to implement the technological and organisational security measures described in Schedule 3. The Data Processor agrees to notify the Data Controller of any material change to the measures as described in Schedule 3. 12.3 9.3 It is the responsibility of each Party to ensure that its staff members are appropriately trained to handle and process the Personal Data in accordance with the technical and organisational security measures set out in Schedule 3 together with any other applicable national data protection laws and guidance. 12.4 9.4 The level, content and regularity of training referred to in clause 11.3 9.3 shall be proportionate to the staff members' role, responsibility and frequency with respect to their handling and processing of the Personal Data.