Common use of Assistance to the Controller Clause in Contracts

Assistance to the Controller. The processor shall promptly notify the controller of any request it has received from the data subject. The processor shall assist the controller in fulfilling its obligations to respond to data subjects’ requests to exercise their rights, taking into account the nature of the processing. In addition to the processor’s obligation to assist the controller pursuant to Clause 5(1), the processor shall furthermore assist the controller in ensuring compliance with the following obligations, taking into account the nature of the data processing and the information available to the processor: a. the obligation to carry out an assessment of the impact of the envisaged processing operations on the protection of personal data (a ‘data protection impact assessment’); b. the obligation to consult the competent supervisory authority/ies prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk. The Processor shall provide assistance in reviewing data breaches and implementing any notification obligations, as well as in complying with the obligation to ensure that personal data is accurate and up to date. Furthermore, the Processor shall assist with appropriate technical and organisational measures to enable the Controller to fulfil its existing obligations towards the data subject.