where reasonably possible, store the Personal Data in a structured, commonly used and machine readable format; not transfer Personal Data outside of the European Economic Area without the prior written consent of the Controller. Where the Controller consents to the transfer of Personal Data outside the European Economic Area, the Processor shall comply with: the obligations of a controller under Articles 44 to 50 of the GDPR inclusive by providing an adequate level of protection to any Personal Data transferred; and any reasonable instructions of the Controller in relation to such transfer; have a data protection officer where required by the GDPR, and where a data protection officer is not required, have a named individual that is responsible and available to deal with data protection issues as and when they arise in conjunction with the Controller; make available to the Controller all information necessary to demonstrate compliance with this agreement insofar as it relates to data protection; and the Controller, or its external advisers (subject to reasonable and appropriate confidentiality undertakings), to inspect and audit the Processor’s data processing activities and those of its relevant agents, group companies and sub-contractors, and comply with all reasonable requests or directions by the Controller, to enable to Controller to verify and procure that the Processor is in full compliance with its obligations under this agreement insofar as it relates to data protection. Notwithstanding anything in this agreement, information provided by a Processor to a Controller, whether through audit or otherwise, may be disclosed by the Controller if requested or required generally or specifically by applicable law, a court of competent jurisdiction, a supervisory authority, a certification body (as referred to by Article 43 of the GDPR) or a monitoring body (as referred to by Article 41 of the GDPR) for the purposes of responding to a claim, request for information, inquiry or investigation.
where reasonably possible, store the Personal Data in a structured, commonly used and machine readable format; not transfer Personal Data outside of the European Economic Area without the prior written consent of the Controller. Where the Controller consents to the transfer of Personal Data outside the European Economic Area, the Processor shall comply with: the obligations of a controller under Articles 44 to 50 of the GDPR inclusive by providing an adequate level of protection to any Personal Data transferred; and any reasonable instructions of the Controller in relation to such transfer; have a data protection officer where required by the GDPR, and where a data protection officer is not required, have a named individual that is responsible and available to deal with data protection issues as and when they arise in conjunction with the Controller; make available to the Controller all information necessary to demonstrate compliance with this agreement insofar as it relates to data protection; and the Controller, or its external advisers (subject to reasonable and appropriate confidentiality undertakings), to inspect and audit the Processor’s data processing activities and those of its relevant agents, group companies and sub-contractors, and comply with all reasonable requests or directions by the Controller, to enable to Controller to verify and procure that the Processor is in full compliance with its obligations under this agreement insofar as it relates to data protection. Notwithstanding anything in this agreement, information provided by a Processor to a Controller, whether through audit or otherwise, may be disclosed by the Controller if requested or required generally or specifically by applicable law, a court of competent jurisdiction, a supervisory authority, a certification body (as referred to by Article 43 of the GDPR) or a monitoring body (as referred to by Article 41 of the GDPR) for the purposes of responding to a claim, request for information, inquiry or investigation.
Revised%20GDPR%20Contracts%20for%20Employers.docx