Controllership and compliance. Center and Sponsor are independent data controllers with respect to the handling of patient data. Sponsor considers itself an independent controller with respect to its processing of personal data reported by Center to Sponsor pursuant to the Study Protocol and the Agreement. The Center remains the controller of personal data collected from the trial subject with respect to the treatment of the trial subject pursuant to medical standard of care and applicable legal obligations. Center and Sponsor will comply with data protection applicable law, including but not limited to the implementation of the inventory and an appropriate security program, the appointment of a data protection officer and the execution of processing agreements with the processors they respectively appoint. Center and Sponsor will be responsible for any noncompliance of its own tasks as data controller, including any noncompliance by a processor which it has engaged.
