Common use of Sharing of Personal Information Clause in Contracts

Sharing of Personal Information. With respect to the exchange of information or data, the Parties shall comply with the Data Sharing Addendum attached hereto as Exhibit A (“Data Sharing Addendum”), the terms of which are hereby incorporated into this Agreement. The Parties shall further comply with the Business Associate Agreements attached hereto as Exhibit B (each a “Business Associate Agreement”) the terms of which are hereby incorporated into this Agreement, with respect to the exchange of Protected Health Information (as defined in the Business Associate Agreements). For the purposes of this Section 6.03, capitalized terms used but not defined herein shall have the meanings given to such terms in the Data Sharing Addendum. For the purposes of the Data Sharing Addendum, the Parties acknowledge and agree that the details of the Processing of Personal Information pursuant to the performance of this Agreement (as required by Article 28(3) GDPR) shall be as follows: (a) The subject matter of the Processing of Personal Information is set out in this Agreement and on each respective Service Schedule under which Personal Information is Processed. Subject to Section 4.11 and Section 4.12 of the Data Sharing Addendum, Data Recipient will Process Personal Information for the duration of the period set forth in accordance with RemainCo’s records management policy in effect as of the Effective Date, unless otherwise set forth in the applicable Service Schedule or otherwise agreed between the Parties in writing to comply with applicable Law. (b) Data Recipient will Process Personal Information as necessary to perform its obligations under the applicable Service Schedule and this Agreement. (c) The Personal Information to be Processed by the Data Recipient in performing its obligations under this Agreement may include, but is not limited to, the categories of Personal Information (if any) set forth in the applicable Service Schedule (the “Data Processing Categories”). (d) The Personal Information to be Processed by the Data Recipient in relation to this Agreement may include, but is not limited to, Personal Information relating to the categories (if any) of Data Subjects set forth in the applicable Service Schedule (the “Data Subject Categories”).

Sharing of Personal Information. With respect to the exchange of information or data, the Parties shall comply with the Data Sharing Addendum attached hereto as Exhibit A (“Data Sharing Addendum”), the terms of which are hereby incorporated into this Agreement. The Parties shall further comply with the Business Associate Agreements attached hereto as Exhibit B and Exhibit C (each a “Business Associate AgreementAgreements”) ), the terms of which are hereby incorporated into this Agreement, with respect to the exchange of Protected Health Information (as defined in the Business Associate Agreements). For the purposes of this Section 6.034.08, capitalized terms used but not defined herein shall have the meanings given to such terms in the Data Sharing Addendum. For the purposes of the Data Sharing Addendum, the Parties acknowledge and agree that the details of the Processing of Personal Information pursuant to the performance of this Agreement (as required by Article 28(3) GDPR) shall be as follows: (a) Subject Matter and Duration of the Processing of Personal Information. The subject matter of the Processing of Personal Information is set out in this Agreement and on each respective Service Schedule under which Personal Information is ProcessedAgreement. Subject to Section sections 4.11 and Section 4.12 of the Data Sharing Addendum, each Data Recipient will shall Process Personal Information for the duration of the period set forth in in accordance with RemainCo’s records management policy in effect as of the Effective Date, unless otherwise set forth in the applicable Service Schedule or otherwise agreed between the Parties in writing to comply with applicable Law. (b) The Nature and Purpose of the Processing of Personal Information. The Data Recipient will shall Process Personal Information as necessary to perform its obligations under the applicable Service Schedule and this Agreement. (c) The Personal Information to be Processed by the Data Recipient in performing its obligations under this Agreement may include, but is not limited to, the categories of Personal Information (if any) set forth in the applicable Service Schedule (the “Data Processing Categories”). (d) The Personal Information to be Processed by the Data Recipient in relation to this Agreement may include, but is not limited to, Personal Information relating to the categories (if any) of Data Subjects set forth in the applicable Service Schedule (the “Data Subject Categories”).