{"component": "definition", "props": {"groups": [{"snippet_links": [{"key": "european-parliament-and-of-the-council", "type": "clause", "offset": [38, 76]}, {"key": "april-2016", "type": "clause", "offset": [83, 93]}, {"key": "protection-of", "type": "definition", "offset": [101, 114]}, {"key": "natural-persons", "type": "clause", "offset": [115, 130]}, {"key": "with-regard-to", "type": "clause", "offset": [131, 145]}, {"key": "the-processing-of-personal-data", "type": "clause", "offset": [146, 177]}, {"key": "free-movement", "type": "clause", "offset": [189, 202]}], "size": 156, "snippet": "means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.", "samples": [{"hash": "arLUMq9mb9F", "uri": "/contracts/arLUMq9mb9F#eu-gdpr", "label": "Data Protection Addendum", "score": 36.3774032593, "published": true}, {"hash": "dNoNoskxnqV", "uri": "/contracts/dNoNoskxnqV#eu-gdpr", "label": "Call Off Contract", "score": 35.1325759888, "published": true}, {"hash": "2OGzLe293EE", "uri": "/contracts/2OGzLe293EE#eu-gdpr", "label": "Master Agreement", "score": 34.94688797, "published": true}], "hash": "484abdf9edea9652489ddec1dc54a764", "id": 1}, {"snippet_links": [{"key": "the-general-data-protection-regulation", "type": "clause", "offset": [6, 44]}, {"key": "eu-law", "type": "definition", "offset": [82, 88]}], "size": 147, "snippet": "means the General Data Protection Regulation ((EU) 2016/679), as it has effect in EU law.", "samples": [{"hash": "hgbKYmiJc59", "uri": "/contracts/hgbKYmiJc59#eu-gdpr", "label": "Lab Services Master Services Agreement", "score": 35.9855079651, "published": true}, {"hash": "6l5kM0FoWz5", "uri": "/contracts/6l5kM0FoWz5#eu-gdpr", "label": "Standard Services Agreement", "score": 35.9679260254, "published": true}, {"hash": "5sEOnQwQxhu", "uri": "/contracts/5sEOnQwQxhu#eu-gdpr", "label": "It Master Services Agreement", "score": 35.9679260254, "published": true}], "hash": "2e163bacdc3dd6487f6db62435669ec9", "id": 2}, {"snippet_links": [{"key": "the-general-data-protection-regulation", "type": "clause", "offset": [6, 44]}], "size": 83, "snippet": "means the General Data Protection Regulation ((EU) 2016/679).", "samples": [{"hash": "hJ6OpTWIynU", "uri": "/contracts/hJ6OpTWIynU#eu-gdpr", "label": "Master Services Agreement", "score": 36.5249824524, "published": true}, {"hash": "8pv3KNlaT7y", "uri": "/contracts/8pv3KNlaT7y#eu-gdpr", "label": "Master Services Agreement", "score": 36.4019546509, "published": true}, {"hash": "dI7Xva665xH", "uri": "/contracts/dI7Xva665xH#eu-gdpr", "label": "Professional Services Agreement", "score": 36.267124176, "published": true}], "hash": "cb721c263b6691010f703f001907d9ff", "id": 3}, {"snippet_links": [{"key": "european-parliament-and-of-the-council", "type": "clause", "offset": [33, 71]}, {"key": "protection-of", "type": "definition", "offset": [79, 92]}, {"key": "natural-persons", "type": "clause", "offset": [93, 108]}, {"key": "with-regard-to", "type": "clause", "offset": [109, 123]}, {"key": "the-processing-of-personal-data", "type": "clause", "offset": [124, 155]}, {"key": "free-movement", "type": "clause", "offset": [167, 180]}, {"key": "general-data-protection-regulation", "type": "clause", "offset": [195, 229]}], "size": 75, "snippet": "means Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (General Data Protection Regulation).", "samples": [{"hash": "cCSl7Kb7CD7", "uri": "https://cdn.northropgrumman.com/-/media/Supplier-Documents/Terms-and-Conditions/CTM-P-ST-001USGFFPOrderNotforCommercialItems_R07_25.pdf?rev=5d4a1d25cd7c46a99850b80267e58680", "label": "cdn.northropgrumman.com", "score": 20.4866657257, "published": false}, {"hash": "6RzCcDRVCDA", "uri": "https://cdn.northropgrumman.com/-/media/Supplier-Documents/Terms-and-Conditions/CTM-P-ST-004USGCROrderNotforCommercialItems_R07_25.pdf?rev=bc2daeda252d400ba572b36aeebb164b", "label": "cdn.northropgrumman.com", "score": 20.4839324951, "published": false}, {"hash": "dGlujBPdbAM", "uri": "https://cdn.northropgrumman.com/-/media/Supplier-Documents/Terms-and-Conditions/CTM-P-ST-003USGTMOrderNotforCommercialItems_R07_25.pdf?rev=ed389e0df183407da6c32e3d2621e4b3", "label": "cdn.northropgrumman.com", "score": 20.4839324951, "published": false}], "hash": "d4de0a3589ea8d7dc6da08b9dcebae51", "id": 4}, {"snippet_links": [{"key": "european-parliament-and-of-the-council", "type": "clause", "offset": [38, 76]}, {"key": "april-2016", "type": "clause", "offset": [83, 93]}], "size": 34, "snippet": "means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.", "samples": [{"hash": "eGmHGazNEov", "uri": "/contracts/eGmHGazNEov#eu-gdpr", "label": "Software as a Service Agreement", "score": 35.7812690735, "published": true}, {"hash": "6NVmurh9mHf", "uri": "/contracts/6NVmurh9mHf#eu-gdpr", "label": "Data Processing Addendum", "score": 33.5015563965, "published": true}, {"hash": "7akUdsXbC2J", "uri": "/contracts/7akUdsXbC2J#eu-gdpr", "label": "Data Processing Agreement", "score": 32.354598999, "published": true}], "hash": "146e56aebbafb5d1f9d110f84a39ea08", "id": 5}, {"snippet_links": [{"key": "the-general-data-protection-regulation", "type": "clause", "offset": [6, 44]}, {"key": "eu-law", "type": "definition", "offset": [82, 88]}], "size": 17, "snippet": "means the General Data Protection Regulation ((EU) 2016/679), as it has effect in EU law;", "samples": [{"hash": "fOJOWLdtthV", "uri": "/contracts/fOJOWLdtthV#eu-gdpr", "label": "Terms and Conditions", "score": 36.220703125, "published": true}, {"hash": "kIVCFhCBbpw", "uri": "/contracts/kIVCFhCBbpw#eu-gdpr", "label": "Terms and Conditions", "score": 35.6969604492, "published": true}, {"hash": "5pO2KwWbfOB", "uri": "/contracts/5pO2KwWbfOB#eu-gdpr", "label": "Master Services Agreement", "score": 35.2811279297, "published": true}], "hash": "8ca00239422e75934083812d6d3d77f9", "id": 6}, {"snippet_links": [{"key": "the-general-data-protection-regulation", "type": "clause", "offset": [6, 44]}, {"key": "the-eu", "type": "clause", "offset": [89, 95]}, {"key": "the-uk-gdpr", "type": "definition", "offset": [104, 115]}, {"key": "international-organisation", "type": "clause", "offset": [118, 144]}, {"key": "same-meaning", "type": "clause", "offset": [154, 166]}, {"key": "the-gdpr", "type": "definition", "offset": [173, 181]}], "size": 16, "snippet": "means the General Data Protection Regulation (EU) 2016/679; \u201cGDPR\u201d means, as applicable, the EU GDPR or the UK GDPR; \u201cInternational Organisation\u201d has the same meaning as in the GDPR;", "samples": [{"hash": "1Oeto5uBSGV", "uri": "/contracts/1Oeto5uBSGV#eu-gdpr", "label": "Framework Agreement", "score": 35.8698501587, "published": true}, {"hash": "3PilFZXcny8", "uri": "/contracts/3PilFZXcny8#eu-gdpr", "label": "Professional Services", "score": 35.4404945374, "published": true}, {"hash": "1bJVi4ZQC35", "uri": "/contracts/1bJVi4ZQC35#eu-gdpr", "label": "Professional Services", "score": 35.3793907166, "published": true}], "hash": "8ddd949b14538f6ab0fe5620c594e8a0", "id": 7}, {"snippet_links": [{"key": "federal-act", "type": "definition", "offset": [28, 39]}, {"key": "the-law", "type": "clause", "offset": [97, 104]}, {"key": "england-and-wales", "type": "clause", "offset": [108, 125]}, {"key": "section-3", "type": "definition", "offset": [139, 148]}, {"key": "the-european-union", "type": "clause", "offset": [152, 170]}, {"key": "act-2018", "type": "clause", "offset": [184, 192]}, {"key": "uk-gdpr", "type": "clause", "offset": [199, 206]}, {"key": "uk-data-protection", "type": "clause", "offset": [218, 236]}, {"key": "privacy-and", "type": "definition", "offset": [260, 271]}, {"key": "electronic-communications", "type": "definition", "offset": [272, 297]}, {"key": "ec-directive", "type": "definition", "offset": [299, 311]}, {"key": "each-case", "type": "definition", "offset": [334, 343]}, {"key": "from-time-to-time", "type": "clause", "offset": [377, 394]}, {"key": "the-terms", "type": "clause", "offset": [396, 405]}, {"key": "data-subject", "type": "definition", "offset": [407, 419]}, {"key": "personal-data-breach", "type": "definition", "offset": [440, 460]}, {"key": "supervisory-authority", "type": "definition", "offset": [509, 530]}, {"key": "the-meanings", "type": "definition", "offset": [543, 555]}, {"key": "the-gdpr", "type": "definition", "offset": [569, 577]}], "size": 10, "snippet": "or \u201cGDPR\u201d), (iii) the Swiss Federal Act on Data Protection, (iv) the EU GDPR as it forms part of the law of England and Wales by virtue of section 3 of the European Union (Withdrawal) Act 2018 (the \u201cUK GDPR\u201d); (v) the UK Data Protection \u2587\u2587\u2587 \u2587\u2587\u2587\u2587; and (vi) the Privacy and Electronic Communications (EC Directive) Regulations 2003; in each case, as updated, amended or replaced from time to time. The terms \u201cData Subject\u201d, \u201cPersonal Data\u201d, \u201cPersonal Data Breach\u201d, \u201cprocessing\u201d, \u201cprocessor,\u201d \u201ccontroller,\u201d and \u201csupervisory authority\u201d shall have the meanings set forth in the GDPR.", "samples": [{"hash": "asPqF1SpaE8", "uri": "/contracts/asPqF1SpaE8#eu-gdpr", "label": "Data Processing Addendum", "score": 33.7123336792, "published": true}, {"hash": "hbPjDj0o12N", "uri": "/contracts/hbPjDj0o12N#eu-gdpr", "label": "Data Processing Addendum", "score": 33.3674278259, "published": true}, {"hash": "6b1Sgy452H6", "uri": "/contracts/6b1Sgy452H6#eu-gdpr", "label": "Data Processing Agreement", "score": 27.3709793091, "published": true}], "hash": "043106104f0be4ca83d74274f03fd766", "id": 8}, {"snippet_links": [{"key": "the-gdpr", "type": "definition", "offset": [0, 8]}, {"key": "union-legislation", "type": "definition", "offset": [32, 49]}, {"key": "relates-to", "type": "definition", "offset": [56, 66]}, {"key": "protection-of-individuals", "type": "clause", "offset": [71, 96]}, {"key": "the-processing-of-personal-data", "type": "clause", "offset": [113, 144]}, {"key": "a-party", "type": "clause", "offset": [154, 161]}, {"key": "codes-of-practice", "type": "definition", "offset": [194, 211]}, {"key": "issued-by", "type": "definition", "offset": [212, 221]}, {"key": "data-protection", "type": "definition", "offset": [235, 250]}, {"key": "supervisory-authority", "type": "definition", "offset": [254, 275]}, {"key": "the-european-union", "type": "clause", "offset": [279, 297]}, {"key": "applicable-to", "type": "definition", "offset": [302, 315]}], "size": 7, "snippet": "the GDPR and any other European Union legislation which relates to the protection of individuals with regards to the processing of personal data to which a party is subject and the guidance and codes of practice issued by the relevant data protection or supervisory authority in the European Union and applicable to a party;", "samples": [{"hash": "gz5EIBc28ns", "uri": "/contracts/gz5EIBc28ns#eu-gdpr", "label": "Consultancy Agreement", "score": 33.3719215393, "published": true}, {"hash": "2WzxRKvfIHm", "uri": "/contracts/2WzxRKvfIHm#eu-gdpr", "label": "Consultancy Agreement", "score": 33.3050231934, "published": true}, {"hash": "fZCDjbFRtoa", "uri": "/contracts/fZCDjbFRtoa#eu-gdpr", "label": "Consultancy Agreement", "score": 25.2819976807, "published": true}], "hash": "80b31c999f81dfb39ee33d917590af57", "id": 9}, {"snippet_links": [{"key": "federal-act", "type": "definition", "offset": [28, 39]}, {"key": "the-law", "type": "clause", "offset": [106, 113]}, {"key": "england-and-wales", "type": "clause", "offset": [117, 134]}, {"key": "section-3", "type": "definition", "offset": [148, 157]}, {"key": "the-european-union", "type": "clause", "offset": [161, 179]}, {"key": "uk-gdpr", "type": "clause", "offset": [208, 215]}, {"key": "data-protection-act-2018", "type": "definition", "offset": [233, 257]}, {"key": "each-case", "type": "definition", "offset": [262, 271]}, {"key": "from-time-to-time", "type": "clause", "offset": [305, 322]}], "size": 7, "snippet": "or \u201cGDPR\u201d), (iii) the Swiss Federal Act on Data Protection (\u201cFADP\u201d), (iv) the EU GDPR as it forms part of the law of England and Wales by virtue of section 3 of the European Union (Withdrawal) Act 2018 (the \u201cUK GDPR\u201d) and (v) the UK Data Protection Act 2018; in each case, as updated, amended or replaced from time to time.", "samples": [{"hash": "8y7ZH4IZhQw", "uri": "/contracts/8y7ZH4IZhQw#eu-gdpr", "label": "Master Cloud Agreement", "score": 36.23072052, "published": true}, {"hash": "ihUoskOpUTM", "uri": "/contracts/ihUoskOpUTM#eu-gdpr", "label": "Data Processing Agreement", "score": 35.9113731384, "published": true}, {"hash": "18im7C3kPkd", "uri": "/contracts/18im7C3kPkd#eu-gdpr", "label": "Data Processing Agreement (Dpa)", "score": 35.359539032, "published": true}], "hash": "b4a72e0878120229e3b2da1ccf3cd7c1", "id": 10}], "next_curs": "ClQSTmoVc35sYXdpbnNpZGVyY29udHJhY3RzcjALEhpEZWZpbml0aW9uU25pcHBldEdyb3VwX3Y1NiIQZXUtZ2RwciMwMDAwMDAwYQyiAQJlbhgAIAA=", "definition": {"size": 702, "snippet": "means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.", "title": "EU GDPR", "id": "eu-gdpr", "examples": ["The term \u201cprocessing\u201d and any associated terms are to be read in accordance with Article 4 of the UK GDPR and <strong>EU GDPR</strong> (as applicable).", "Such information must not be used for any other purpose nor divulged to any third party and the Client undertakes to abide by the provisions of the Data Protection Act 2018, UK GDPR and <strong>EU GDPR</strong> in receiving and processing the data at all times.", "Terms not otherwise defined herein shall have the meaning given to them in the <strong>EU GDPR</strong> or the Agreement.", "Process personal data in accordance with the <strong>EU GDPR</strong> and with the privacy and security laws and regulations in the Member State in which it is established.", "For Personal Data protected under the <strong>EU GDPR</strong>: Where the data exporter is established in the EEA, the competent supervisory authority shall be the lead supervisory authority for the data exporter.", "The Supplier must keep and maintain full and accurate records and accounts on everything to do with the Contract for 7 years after the date of expiry or termination of the Contract and in accordance with the UK GDPR or the <strong>EU GDPR</strong> as the context requires.", "The UK GDPR and <strong>EU GDPR</strong> are defined in section 3 of the Data Protection Act 2018.", "G.1. Upon Controller\u2019s reasonable request, the Processor will make available to the Controller, information as is reasonably necessary to demonstrate Processor\u2019s compliance with its obligations under the <strong>EU GDPR</strong> or other applicable laws in respect of its Processing of the Personal Data.", "The Supplier must keep and maintain full and accurate records and accounts in respect of the Contract during the Contract Period and for 7 years after the End Date and in accordance with the UK GDPR or the <strong>EU GDPR</strong> as the context requires, including the records and accounts which the Buyer has a right to Audit."], "related": [["gdpr", "GDPR", "GDPR"], ["eu-sccs", "EU SCCs", "EU SCCs"], ["major-eu-country", "Major EU Country", "Major EU Country"], ["eua", "EUA", "EUA"], ["euwa", "EUWA", "EUWA"]], "related_snippets": [], "updated": "2026-03-18T05:31:41+00:00"}, "json": true, "cursor": ""}}