Common use of Technical and Organizational Security Measures Clause in Contracts

Technical and Organizational Security Measures. 9.1 The Data Processor shall perform its obligations and actions under this DPA with all due skill, care and diligence. 9.2 The Data Processor shall use technical and organizational security measures appropriate to prevent the harm which might result from any unauthorized or unlawful processing, loss, destruction, damage, alternation to or disclosure of the Personal Data and having regard to the nature of the Personal Data which is to be protected. 9.3 Should the Data Processor become aware of any non-conformity with the security requirements set out above, either within its own or within the subcontractor’s organization, such non-conformity shall be notified to the Data Controller in accordance with the Personal Data Breach procedure set out in Section 11.