Specification of the technical and organisational measures Sample Clauses

Specification of the technical and organisational measures. 9.1 The Contractor’s selection is carried out in particular based on the assessment that it provides sufficient guarantees of compliance with the technical and organisational measures for data security and the processing of Personal Data in accordance with the requirements of the legal regulations ensures a level of processing security appropriate to the risk to the rights and freedoms of the rights of the natural persons affected by the processing 9.2 If it is not a case of remote maintenance/remote access, the Contractor shall ensure the protection objectives of Art. 32 para. 1 GDPR, such as the confidentiality, integrity, availability and resilience of the systems and services used for data processing and their resiliency in regard to the type, scope, circumstances and purposes of the processing. In addition, it is ensured in this case that the availability of data and access to it is quickly restored upon the occurrence of a physical or technical incident and that as far as possible transport and storage encryption is used. 9.3 The Contractor has used a recognised methodology for the risk assessment for the processing of Personal Data under the contract, which takes into account the probability of occurrence and severity of the risks for the rights and freedoms of the Data Subjects. 9.4 For its area of responsibility, the Contractor guarantees the implementation of appropriate technical and organisational measures for compliance with the data protection regulations according to the current state of the art and permanent containment of the risk associated with data processing. The data protection concept described in Appendix 4 represents the selection of the technical and organisational measures appropriate with regard to the determined risk, taking into account the protection objectives in accordance with the state of the art, and in particular taking into account the IT systems and processing operations used at the Contractor and is determined in a binding manner. 9.5 The contractual processing of data in the home office is permissible if the Contractor ensures appropriate security measures for the criticality of the data processing – comparable to data processing in the office. The Contractor must take appropriate technical and organisational precautionary measures for this and provide proof upon request. 9.6 Technical and organisational measures are subject to technical progress and further development. In this respect, the Contractor is permitted ...
AutoNDA by SimpleDocs

Related to Specification of the technical and organisational measures

  • Technical and Organisational Measures (1) Before the commencement of processing, the Supplier shall document the execution of the necessary Technical and Organisational Measures, set out in advance of the awarding of the Order or Contract, specifically with regard to the detailed execution of the contract, and shall present these documented measures to the Client for inspection. Upon acceptance by the Client, the documented measures become the foundation of the contract. Insofar as the inspection/audit by the Client shows the need for amendments, such amendments shall be implemented by mutual agreement. (2) The Supplier shall establish the security in accordance with Article 28 Paragraph 3 Point c, and Article 32 GDPR in particular in conjunction with Article 5 Paragraph 1, and Paragraph 2 GDPR. The measures to be taken are measures of data security and measures that guarantee a protection level appropriate to the risk concerning confidentiality, integrity, availability and resilience of the systems. The state of the art, implementation costs, the nature, scope and purposes of processing as well as the probability of occurrence and the severity of the risk to the rights and freedoms of natural persons within the meaning of Article 32 Paragraph 1 GDPR must be taken into account. [Details in Appendix 1] (3) The Technical and Organisational Measures are subject to technical progress and further development. In this respect, it is permissible for the Supplier to implement alternative adequate measures. In so doing, the security level of the defined measures must not be reduced. Substantial changes must be documented.

  • Technical and Organizational Measures The following sections define SAP’s current technical and organizational measures. SAP may change these at any time without notice so long as it maintains a comparable or better level of security. Individual measures may be replaced by new measures that serve the same purpose without diminishing the security level protecting Personal Data.

  • DEVELOPMENT OR ASSISTANCE IN DEVELOPMENT OF SPECIFICATIONS REQUIREMENTS/ STATEMENTS OF WORK

  • Technical Safeguards 1. USAC and DSS will process the data matched and any data created by the match under the immediate supervision and control of authorized personnel to protect the confidentiality of the data, so unauthorized persons cannot retrieve any data by computer, remote terminal, or other means. 2. USAC and DSS will strictly limit authorization to these electronic data areas necessary for the authorized user to perform their official duties. All data in transit will be encrypted using algorithms that meet the requirements of the Federal Information Processing Standard (FIPS) Publication 140-2 or 140-3 (when applicable). 3. Authorized system users will be identified by User ID and password, and individually tracked to safeguard against the unauthorized access and use of the system. System logs of all user actions will be saved, tracked and monitored periodically. 4. USAC will transmit data to DSS via encrypted secure file delivery system. For each request, a response will be sent back to USAC to indicate success or failure of transmission.

  • Recognition of the U.S. Special Resolution Regimes (i) In the event that any Underwriter that is a Covered Entity becomes subject to a proceeding under a U.S. Special Resolution Regime, the transfer from such Underwriter of this Agreement, and any interest and obligation in or under this Agreement, will be effective to the same extent as the transfer would be effective under the U.S. Special Resolution Regime if this Agreement, and any such interest and obligation, were governed by the laws of the United States or a state of the United States. (ii) In the event that any Underwriter that is a Covered Entity or a BHC Act Affiliate of such Underwriter becomes subject to a proceeding under a U.S. Special Resolution Regime, Default Rights under this Agreement that may be exercised against such Underwriter are permitted to be exercised to no greater extent than such Default Rights could be exercised under the U.S. Special Resolution Regime if this Agreement were governed by the laws of the United States or a state of the United States. As used in this Section 16(e):

  • Management of Special and Technical Environment Each certificated support person demonstrates an acceptable level of performance in managing and organizing the special materials, equipment and environment essential to the specialized programs.

  • Function of Joint Health and Safety Committee All incidents involving aggression or violence shall be brought to the attention of the Joint Health and Safety Committee. The Employer agrees that the Joint Health and Safety Committee shall concern itself with all matters relating to violence to staff.

  • Selection of Subcontractors, Procurement of Materials and Leasing of Equipment The contractor shall not discriminate on the grounds of race, color, religion, sex, national origin, age or disability in the selection and retention of subcontractors, including procurement of materials and leases of equipment. The contractor shall take all necessary and reasonable steps to ensure nondiscrimination in the administration of this contract. a. The contractor shall notify all potential subcontractors and suppliers and lessors of their EEO obligations under this contract. b. The contractor will use good faith efforts to ensure subcontractor compliance with their EEO obligations.

  • Recognition of U.S. Special Resolution Regimes (a) In the event a Covered Party becomes subject to a proceeding under a U.S. Special Resolution Regime, the transfer of this Agreement (and any interest and obligation in or under, and any property securing, this Agreement) from such Covered Party will be effective to the same extent as the transfer would be effective under the U.S. Special Resolution Regime if this Agreement (and any interest and obligation in or under, and any property securing, this Agreement) were governed by the laws of the United States of America or a State of the United States of America. (b) In the event that a Covered Party or any BHC Affiliate of such Covered Party becomes subject to a proceeding under a U.S. Special Resolution Regime, any Default Right under this Agreement that may be exercised against such Covered Party is permitted to be exercised to no greater extent than such Default Right could be exercised under the U.S. Special Resolution Regime if this Agreement were governed by the laws of the United States of America or a State of the United States of America.

  • Technical Feasibility of String While ICANN has encouraged and will continue to encourage universal acceptance of all top-­‐level domain strings across the Internet, certain top-­‐level domain strings may encounter difficulty in acceptance by ISPs and webhosters and/or validation by web applications. Registry Operator shall be responsible for ensuring to its satisfaction the technical feasibility of the TLD string prior to entering into this Agreement.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!