## P - Audit (during and upon termination of the data processing activity) 

The Contractor and the sub-processor shall implement mechanisms for secure logging of processing operations on personal data performed on behalf of the ECDC. 

The Contractor shall allow and contribute to possible audits of its processing activities carried out by the EU institution, based on the relevant provisions of Regulation 2018/1725. The audit may be carried out by a third party selected by the ECDC, in possession of the required professional qualifications and bound by a duty of confidentiality. 

The Contractor and the sub-processor shall allow and contribute to audits of their data processing facilities, upon request of the ECDC and/or of the EDPS, as to the measures taken by the Contractor to comply with their obligations upon termination of the personal data processing services. 

## Q - Access by law enforcement bodies 

Under Article 2 of the Protocol on the Privileges and Immunities of the European Communities, “The archives of the Communities shall be inviolable.” As an EU body, the ECDC is subject to the Privileges and Immunities of the European Communities, particularly as regards the inviolability of archives (including the physical location of data and services) and data security. 

The Contractor shall notify the ECDC of any legally binding request for disclosure of the personal data processed on behalf of the ECDC made by any public authority (e.g. a Member State national Prosecutor), including from non-EU countries, without delay. The Contractor shall not give access to the personal data unless authorised by the Director of ECDC. 

## R – Confidentiality 

The Contractor shall ensure that the persons processing the personal data have committed themselves to confidentiality, or are under an appropriate statutory obligation of confidentiality. 

## S - Contractual remedy 

Any deviation from or infringement of the above points may be a ground for ECDC to terminate the Contract with immediate effect, without prejudice to possible damages. 

