The Supplier shall (a) Process the Personal Data only in accordance with instructions from the Authority to perform its obligations under this Framework Agreement;
(b) ensure that at all times it has in place appropriate technical and organisational measures to guard against unauthorised or unlawful Processing of the Personal Data and/or accidental loss, destruction, or damage to the Personal Data;
(c) not disclose or transfer the Personal Data to any third party or Supplier Personnel unless necessary for the provision of the Goods and/or Services and, for any disclosure or transfer of Personal Data to any third party, obtain the prior written consent of the Authority (save where such disclosure or transfer is specifically authorised under this Framework Agreement);
(d) take reasonable steps to ensure the reliability and integrity of any Supplier Personnel who have access to the Personal Data and ensure that the Supplier Personnel:
(i) are aware of and comply with the Supplier’s duties under this Clause 24.5.2 and Clause 24.2 (Confidentiality);
(ii) are informed of the confidential nature of the Personal Data and do not publish, disclose or divulge any of the Personal Data to any third party unless directed in writing to do so by the Authority or as otherwise permitted by this Framework Agreement; and
(iii) have undergone adequate training in the use, care, protection and handling of personal data (as defined in the DPA);
(e) notify the Authority within five (5) Working Days if it receives:
(i) from a Data Subject (or third party on their behalf) a Data Subject Access Request (or purported Data Subject Access Request), a request to rectify, block or erase any Personal Data or any other request, complaint or communication relating to the Authority's obligations under the DPA;
(ii) any communication from the Information Commissioner or any other regulatory authority in connection with Personal Data; or
(iii) a request from any third party for disclosure of Personal Data where compliance with such request is required or purported to be required by Law;
(f) provide the Authority with full cooperation and assistance (within the timescales reasonably required by the Authority) in relation to any complaint, communication or request made (as referred to at Clause 24.5.2(e), including by promptly providing:
(i) the Authority with full details and copies of the complaint, communication or request;
(ii) where applicable, such assistance as is reasonably requested by the Authority to enable the Authority to comply with the Data Subject Access Request within the relevant timescales set out in the DPA; and
(iii) the Authority, on request by the Authority, with any Personal Data it holds in relation to a Data Subject; and
(g) if requested by the Authority, provide a written description of the measures that the Supplier has taken and technical and organisational security measures in place, for the purpose of compliance with its obligations pursuant to this Clause 24.5.2 and provide to the Authority copies of all documentation relevant to such compliance including, protocols, procedures, guidance, training and manuals.
Billing Instructions Enter name and mailing address of nominating Agency Finance Office for billing purposes.
The Supplier must 12.1.1 comply with the Buyer’s written instructions and this Call-Off Contract when Processing Buyer Personal Data
12.1.2 only Process the Buyer Personal Data as necessary for the provision of the G-Cloud Services or as required by Law or any Regulatory Body
12.1.3 take reasonable steps to ensure that any Supplier Staff who have access to Buyer Personal Data act in compliance with Supplier's security processes
Shipping Instructions Unless otherwise instructed, all goods are to be shipped prepaid, FOB Destination, as defined in RCW Title 62A. Where specific authorization is granted to ship goods FOB Shipping Point, the Contractor agrees to prepay all shipping charges, to route cheapest common carrier, and to bill the UW as a separate item on the invoice for the charges. The UW reserves the right to refuse COD shipments. Regardless of FOB point, the Contractor agrees to bear all risks of loss, injury, or destruction of goods and materials ordered herein that occur prior to delivery, and such loss, injury, or destruction shall not release the Contractor from any obligation hereunder.
Department’s Contract Manager The Department’s Contract Manager, who is primarily responsible for the Department’s oversight of the Contract, will be identified in a separate writing to the Contractor upon Contract signing in the following format: Department’s Contract Manager Name Department’s Name Department’s Physical Address Department’s Telephone # Department’s Email Address If the Department changes the Contract Manager, the Department will notify the Contractor. Such a change does not require an amendment to the Contract.