take reasonable steps to ensure the reliability of all members of the Supplier’s Personnel who have access to the Customer’s Personal Data; obtain Approval in to transfer all or any of the Customer’s Personal Data to any Sub-Contractors for the provision of the Services; ensure that all members of the Supplier’s Personnel required to access the Personal Data are informed of the confidential nature of the Personal Data and comply with the obligations set out in this Clause 9.1; ensure that none of the Supplier’s Personnel publish, disclose or divulge any of the Customer’s Personal Data to any third party unless directed in writing to do so by the Customer; notify the Customer within five (5) Working Days if the Supplier receives: a request from a Data Subject to have access to the Customer’s Personal Data relating to that person; or a complaint or request relating to the Customer's obligations under the Data Protection Legislation; provide the Customer with full cooperation and assistance in relation to any complaint or request made relating to the Customer’s Personal Data, including by: providing the Customer with full details of the complaint or request; complying with a data access request within the relevant timescales set out in the Data Protection Legislation and in accordance with the Customer's instructions; providing the Customer with any Customer’s Personal Data it holds in relation to a Data Subject (within the timescales required by the Customer); and providing the Customer with any information requested by the Customer; permit or procure permission for the Customer or the Customer’s Representative (subject to reasonable and appropriate confidentiality undertakings), to inspect and audit, the Supplier's data Processing activities (and/or those of its agents and Sub-Contractors) and comply with all reasonable requests or directions by the Customer to enable the Customer to verify and/or procure that the Supplier is in full compliance with its obligations under the Legal Services Contract; provide a written description of the technical and organisational methods employed by the Supplier for Processing the Customer’s Personal Data (within the timescales required by the Customer); and not Process or otherwise transfer any Customer’s Personal Data outside the European Economic Area without the prior written consent of the Customer which shall have the absolute right grant (whether conditionally or otherwise) or deny. The Supplier shall comply at all times with the Data Protection Legislation and shall not perform its obligations under the Legal Services Contract in such a
take reasonable steps to ensure the reliability of all members of the Supplier’s Personnel who have access to the Customer’s Personal Data; obtain Approval in to transfer all or any of the Customer’s Personal Data to any Sub-Contractors for the provision of the Services; ensure that all members of the Supplier’s Personnel required to access the Personal Data are informed of the confidential nature of the Personal Data and comply with the obligations set out in this Clause 9.1; ensure that none of the Supplier’s Personnel publish, disclose or divulge any of the Customer’s Personal Data to any third party unless directed in writing to do so by the Customer; notify the Customer within five (5) Working Days if the Supplier receives: a request from a Data Subject to have access to the Customer’s Personal Data relating to that person; or a complaint or request relating to the Customer's obligations under the Data Protection Legislation; provide the Customer with full cooperation and assistance in relation to any complaint or request made relating to the Customer’s Personal Data, including by: providing the Customer with full details of the complaint or request; complying with a data access request within the relevant timescales set out in the Data Protection Legislation and in accordance with the Customer's instructions; providing the Customer with any Customer’s Personal Data it holds in relation to a Data Subject (within the timescales required by the Customer); and providing the Customer with any information requested by the Customer; permit or procure permission for the Customer or the Customer’s Representative (subject to reasonable and appropriate confidentiality undertakings), to inspect and audit, the Supplier's data Processing activities (and/or those of its agents and Sub-Contractors) and comply with all reasonable requests or directions by the Customer to enable the Customer to verify and/or procure that the Supplier is in full compliance with its obligations under the Legal Services Contract; provide a written description of the technical and organisational methods employed by the Supplier for Processing the Customer’s Personal Data (within the timescales required by the Customer); and not Process or otherwise transfer any Customer’s Personal Data outside the European Economic Area without the prior written consent of the Customer which shall have the absolute right grant (whether conditionally or otherwise) or deny. The Supplier shall comply at all times with the Data Protection Legislation and shall not perform its obligations under the Legal Services Contract in such a
Attachment%208%20-%20Panel%20Agreement%20Schedule%204%20-%20Legal%20Services%20Contract%20and%20Order%20Form%20Version%204.docx