Without prejudice to the generality of clause 15. 1, the Supplier shall, in relation to any Personal Data processed by the Supplier in connection with this Agreement:
15.6.1. process the Personal Data only in accordance with this Agreement or on the documented instructions of the Customer unless the Supplier is required by Applicable Law to otherwise process that Personal Data. Where the Supplier is relying on Applicable Law as the basis for processing Personal Data, the Supplier shall notify the Customer of this before performing the processing required by the Applicable Law unless that Applicable Law prohibits the Supplier from so notifying the Customer. The Supplier shall inform the Customer if, in the opinion of the Supplier, any of its instructions infringes or may infringe Data Protection Legislation;
15.6.2. ensure that it has in place appropriate technical and organisational measures to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, which the Customer has reviewed and confirms are appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures;
15.6.3. ensure that all personnel who have access to and/or process Personal Data are obliged to keep the Personal Data confidential and to only access and process it in accordance with the terms of this Agreement;
15.6.4. assist the Customer, at the Customer's reasonable cost, in responding to any request from a Data Subject and in ensuring compliance with its obligations under the Data Protection Legislation with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators;
15.6.5. notify the Customer without undue delay on becoming aware of an actual, threatened or suspected Personal Data breach and provide all information and documentation as the Customer may reasonably require in relation to the same;
15.6.6. at the written direction of the Customer, delete or return Personal Data and copies thereof to the Customer on termination or expiry of this Agreement unless required by Applicable Law to store the Personal Data;
15.6.7. maintain records to demonstrate its compliance with this clause 15.
Without prejudice to the generality of clause 15. 1, to the extent that the Services involve the processing of any Personal Data, the Client shall ensure that it has all necessary appropriate consents and notices in place to enable lawful transfer of any Personal Data to ISOvA for the duration and purposes of this Agreement.
Without prejudice to the generality of clause 15. 1, to the extent that the Services involve the processing of any Personal Data, the Client shall ensure that it has all necessary appropriate consents and notices in place to enable lawful transfer of any Personal Data to AvISO for the duration and purposes of this Agreement.
Without prejudice to the generality of clause 15. 1, this Agreement shall supersede as from the date hereof a letter of intent dated 2nd August 1996 from P Corporation and confidentiality letters dated 14 August 1996 and 18 September 1996.
Without prejudice to the generality of clause 15. 4, the Customer (and/or where appropriate the relevant Service Recipient) will ensure that it has all necessary rights and notices in place to enable the lawful transfer of the Personal Data to Egton for the duration and purposes of the Agreement.