Storage and Protection of Data. To the extent that the undertaking of this Agreement requires the Supplier to process the Data on behalf of AHDB, the Parties agree that AHDB shall be the data controller and the Supplier shall be the data processor (as such terms are defined in the DPL) and the Supplier agrees to: comply with all applicable DPL in respect of the performance of its obligations under this Agreement and shall not by any act or omission cause AHDB (or any other person) to be in breach of any DPL; store all data in accordance with Part 1; process the Data only on and in accordance with AHDB's written and documented instructions as set out in this Annex 2 and provided from time to time, unless the processing is prohibited by any applicable laws and the Supplier has informed AHDB of such applicable laws; notify AHDB immediately at Xxxx.Xxxxxxxxxx@xxxx.xxx.xx if it believes that it has been given an instruction which does not comply with the DPL; not transfer or permit the transfer of the Data outside the European Economic Area without AHDB's prior written consent; and implement and maintain appropriate technical and organisational measures in accordance with this Annex 2 and in such a manner that the processing will: meet the requirements of the DPL; ensure the protection of the rights of data subjects within the meaning of the DPL; and preserve the integrity of the Data and ensure a level of physical and technical security in respect of the Data at all times that is appropriate to the risks that are presented by the processing, in particular from accidental or unlawful destruction, loss, damage or alteration, or unauthorised disclosure of or access to the Data transmitted, stored or otherwise processed; As a minimum level of protection for the Data, and without prejudice to any other provision of this Annex 2, the Supplier shall: assess risks to the confidentiality, integrity and availability of the Data at least quarterly; verify its Information and Communication Technology (ICT) systems handling the Data to the extent necessary to give confidence in the security of the data; and perform secure back-ups of all Data and ensure that up-to-date back-ups are stored in accordance with a recovery plan. The back-ups shall be made available to AHDB on request.
Appears in 2 contracts
Samples: Contract for the Provision of Goods and/or Services, Contract for the Provision of Goods and/or Services
Storage and Protection of Data. 3.1 To the extent that the undertaking of this Agreement requires the Supplier Researcher to process the Data on behalf of AHDB, the Parties agree that AHDB shall be the data controller and the Supplier Researcher shall be the data processor (as such terms are defined in the DPL) and the Supplier Researcher agrees to: :
3.1.1 comply with all applicable DPL in respect of the performance of its obligations under this Agreement and shall not by any act or omission cause AHDB (or any other person) to be in breach of any DPL; ;
3.1.2 store all data in accordance with Part 1; ;
3.1.3 process the Data only on and in accordance with AHDB's written and documented instructions as set out in this Annex 2 4 and provided from time to time, unless the processing is prohibited by any applicable laws and the Supplier Researcher has informed AHDB of such applicable laws; ;
3.1.4 notify AHDB immediately at Xxxx.Xxxxxxxxxx@xxxx.xxx.xx if it believes that it has been given an instruction which does not comply with the DPL; ;
3.1.5 not transfer or permit the transfer of the Data outside the European Economic Area without AHDB's prior written consent; and and
3.1.6 implement and maintain appropriate technical and organisational measures in accordance with this Annex 2 4 and in such a manner that the processing will: :
3.1.6.1 meet the requirements of the DPL; ;
3.1.6.2 ensure the protection of the rights of data subjects within the meaning of the DPL; and and
3.1.6.3 preserve the integrity of the Data and ensure a level of physical and technical security in respect of the Data at all times that is appropriate to the risks that are presented by the processing, in particular from accidental or unlawful destruction, loss, damage or alteration, or unauthorised disclosure of or access to the Data transmitted, stored or otherwise processed; ;
3.2 As a minimum level of protection for the Data, and without prejudice to any other provision of this Annex 24, the Supplier Researcher shall: :
3.2.1 assess risks to the confidentiality, integrity and availability of the Data at least quarterly; ;
3.2.2 verify its Information and Communication Technology (ICT) systems handling the Data to the extent necessary to give confidence in the security of the data; and and
3.2.3 perform secure back-ups of all Data and ensure that up-to-date back-back- ups are stored in accordance with a recovery plan. The back-ups shall be made available to AHDB on request.
Appears in 1 contract
Samples: Research Funding Agreement
Storage and Protection of Data. 3.1 To the extent that the undertaking of this Agreement requires the Supplier Recipient to process the Data on behalf of AHDB, the Parties agree that AHDB shall be the data controller and the Supplier Recipient shall be the data processor (as such terms are defined in the DPL) and the Supplier Recipient agrees to: :
3.1.1 comply with all applicable DPL in respect of the performance of its obligations under this Agreement and shall not by any act or omission cause AHDB (or any other person) to be in breach of any DPL; ;
3.1.2 store all data in accordance with Part 1; ;
3.1.3 process the Data only on and in accordance with AHDB's written and documented instructions as set out in this Annex 2 4 and provided from time to time, unless the processing is prohibited by any applicable laws and the Supplier Recipient has informed AHDB of such applicable laws; ;
3.1.4 notify AHDB immediately at Xxxx.Xxxxxxxxxx@xxxx.xxx.xx if it believes that it has been given an instruction which does not comply with the DPL; ;
3.1.5 not transfer or permit the transfer of the Data outside the European Economic Area without AHDB's prior written consent; and and
3.1.6 implement and maintain appropriate technical and organisational measures in accordance with this Annex 2 4 and in such a manner that the processing will: :
3.1.6.1 meet the requirements of the DPL; ;
3.1.6.2 ensure the protection of the rights of data subjects within the meaning of the DPL; and and
3.1.6.3 preserve the integrity of the Data and ensure a level of physical and technical security in respect of the Data at all times that is appropriate to the risks that are presented by the processing, in particular from accidental or unlawful destruction, loss, damage or alteration, or unauthorised disclosure of or access to the Data transmitted, stored or otherwise processed; ;
3.2 As a minimum level of protection for the Data, and without prejudice to any other provision of this Annex 24, the Supplier Recipient shall: :
3.2.1 assess risks to the confidentiality, integrity and availability of the Data at least quarterly; ;
3.2.2 verify its Information and Communication Technology (ICT) systems handling the Data to the extent necessary to give confidence in the security of the data; and and
3.2.3 perform secure back-ups of all Data and ensure that up-to-date back-back- ups are stored in accordance with a recovery plan. The back-ups shall be made available to AHDB on request.
Appears in 1 contract
Samples: Research Funding Agreement
Storage and Protection of Data. 3.1 To the extent that the undertaking of this Agreement requires the Supplier to process the Data on behalf of AHDB, the Parties agree that AHDB shall be the data controller and the Supplier shall be the data processor (as such terms are defined in the DPL) and the Supplier agrees to: :
3.1.1 comply with all applicable DPL in respect of the performance of its obligations under this Agreement and shall not by any act or omission cause AHDB (or any other person) to be in breach of any DPL; ;
3.1.2 store all data in accordance with Part 1; ;
3.1.3 process the Data only on and in accordance with AHDB's written and documented instructions as set out in this Annex 2 and provided from time to time, unless the processing is prohibited by any applicable laws and the Supplier has informed AHDB of such applicable laws; ;
3.1.4 notify AHDB immediately at Xxxx.Xxxxxxxxxx@xxxx.xxx.xx if it believes that it has been given an instruction which does not comply with the DPL; ;
3.1.5 not transfer or permit the transfer of the Data outside the European Economic Area without AHDB's prior written consent; and and
3.1.6 implement and maintain appropriate technical and organisational measures in accordance with this Annex 2 and in such a manner that the processing will: :
3.1.6.1 meet the requirements of the DPL; ;
3.1.6.2 ensure the protection of the rights of data subjects within the meaning of the DPL; and and
3.1.6.3 preserve the integrity of the Data and ensure a level of physical and technical security in respect of the Data at all times that is appropriate to the risks that are presented by the processing, in particular from accidental or unlawful destruction, loss, damage or alteration, or unauthorised disclosure of or access to the Data transmitted, stored or otherwise processed; ;
3.2 As a minimum level of protection for the Data, and without prejudice to any other provision of this Annex 2, the Supplier shall: :
3.2.1 assess risks to the confidentiality, integrity and availability of the Data at least quarterly; ;
3.2.2 verify its Information and Communication Technology (ICT) systems handling the Data to the extent necessary to give confidence in the security of the data; and and
3.2.3 perform secure back-ups of all Data and ensure that up-to-date back-ups are stored in accordance with a recovery plan. The back-ups shall be made available to AHDB on request.
Appears in 1 contract
Samples: Contract for the Provision of Goods and/or Services
