Common use of The Rights of Data Subjects Clause in Contracts

The Rights of Data Subjects. 5.1 The Parties each agree to provide such assistance as is reasonably required to enable the other party to comply with requests from Data Subjects to exercise their rights under the Data Protection Legislation within the time limits imposed by the Data Protection Legislation. 5.2 In respect of the personal data under joint control, the parties shall, where appropriate, notify each other as soon as reasonably practicable after becoming aware if they: 5.2.1 receive a Data Subject Access Request (or purported Data Subject Access Request); 5.2.2 receive a request to rectify, block or erase any Personal Data; 5.2.3 receive any other request, complaint or communication relating to either Party's obligations under the Data Protection Legislation; 5.2.4 receive any communication from the Information Commissioner or any other Regulatory Authority in connection with Personal Data processed under this Agreement; 5.2.5 receives a request from any third Party for disclosure of Personal Data where compliance with such request is required or purported to be required by Law; or 5.2.6 becomes aware of a Data Loss Event. 5.3 In the event that data subjects request further information from either party about how their personal data is being processed, the recipient party shall, where appropriate, notify the other party and seek to agree on the content of the response to the data subject, within 24-48 hours of receipt of the request. 5.4 Each party as a Data Controller in their own right retains responsibility for the final decision made regarding the release of any Personal Data, or other actions relating to Personal Data and Data Subject’s rights. 5.5 Each party shall be responsible for maintaining a record of data subject requests received, the decisions made in response, and any information that was exchanged. Such records must include copies of the request for information, details of the data accessed and shared and where relevant, notes of any meeting, correspondence or telephone calls relating to the request.

The Rights of Data Subjects. 5.1 The Parties each agree to provide such assistance as is reasonably required to enable the other party to comply with requests from Data Subjects to exercise their rights under the Data Protection Legislation within the time limits imposed by the Data Protection Legislation. 5.2 In respect of the personal data under joint controlShared Personal Data, the parties shall, where appropriate, notify each other as soon as reasonably practicable after becoming aware if they: 5.2.1 receive a Data Subject Access Request (or purported Data Subject Access Request); 5.2.2 receive a request to rectify, block or erase any Personal Data; 5.2.3 receive any other request, complaint or communication relating to either Party's obligations under the Data Protection Legislation; 5.2.4 receive any communication from the Information Commissioner Supervisory Authority or any other Regulatory Authority regulatory authority in connection with Personal Data processed under this Agreement; 5.2.5 receives a request from any third Party for disclosure of Personal Data where compliance with such request is required or purported to be required by Lawlaw; or 5.2.6 becomes aware of a Data Loss Event. 5.3 In the event that data subjects Data Subjects request further information from either party about how their personal data Personal Data is being processed, the recipient party shall, where appropriate, notify the other party and seek to agree on the content of the response to the data subjectData Subject, within 24-48 hours of receipt of the request. 5.4 Each party as a Data Controller in their own right retains responsibility for the final decision made regarding the release of any Personal Data, or other actions relating to Personal Data and Data Subject’s rights. 5.5 Each party shall be responsible for maintaining a record of data subject requests Data Subject Access Requests received, the decisions made in response, and any information that was exchanged. Such records must include copies of the request for information, details of the data Personal Data accessed and shared and where relevant, notes of any meeting, correspondence or telephone calls relating to the request.