☐  Sharing data, including disclosure, dissemination, allowing access or otherwise making available 

þ  Returning data to the data exporter or data subject 

þ  Erasing data, including destruction and deletion 

☐  Other (please provide details of other types of processing): 

Appendix 2 to the Standard Contractual Clauses 

This Appendix forms part of the Clauses and must be completed by the parties. 

## Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached): 

☐ We use firewalls to protect our internet connection This will be your first line of defence against an intrusion from the internet. 

Supplementary details of firewalls used (add any relevant details): 

☐ We choose the most appropriate secure settings for our devices and software Most hardware and software will need some level of set-up and configuration in order to provide effective protection. 

Supplementary details of security settings used (add any relevant details): 

☐ We control who has access to your data and services Restrict access to your system to users and sources you trust. 

Supplementary details of how access to your system is controlled (add any relevant details): 

☐ We protect ourselves from viruses and other malware? Anti-virus products can regularly scan your network to prevent or detect threats. 

Supplementary details of antivirus and malware protection used (add any relevant details): 

☐ We keep our software and devices up-to-date Hardware and software needs regular updates to fix bugs and security vulnerabilities. 

Supplementary details of how software and devices are kept up to date (add any relevant details, including details of the software packages, cloud services and devices you use in processing the personal data transferred, and how you keep those updated): 

☐ We regularly backup our data  Regular backups of your most important data will ensure it can be quickly restored in the event of disaster or ransomware infection. 

Supplementary details of how data is backed up (add any relevant details): 

