Notification of personal data breach 1. In case of any personal data breach, the data processor shall, without undue delay after having become aware of it, notify the data controller of the personal data breach. 2. The data processor’s notification to the data controller shall, if possible, take place within 24 hours after the data processor has become aware of the personal data breach to enable the data controller to comply with the data controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33
Governing Law and Settlement of Disputes 8.1 The execution, validity, interpretation, performance, implementation, termination and settlement of disputes of this Agreement shall be governed by the laws of PRC. 8.2 Both Parties shall strive to settle any dispute arising from the interpretation or performance in connection with this Agreement through friendly consultation within 30 days after One Party ask for consultation. In case no settlement can be reached through consultation, One Party can submit such matter to China International Economic and Trade Arbitration Commission (the “CIETAC”). The arbitration shall follow the current rules of CIETAC, and the arbitration proceedings shall take place in Shanghai. The arbitration award shall be final and binding upon the Both Parties and shall be enforceable in accordance as its terms. 8.3 In case of any disputes arising out of the interpretation and performance of this Agreement or any pending arbitration of such dispute, Both Parties shall continue to perform their rights and obligations under this Agreement, except that such maters are involved in the disputes.