Rights of the Data Subject. 6.2.1 eConsult shall, at no additional cost to the Healthcare Organisation, take such technical and organisational measures as may be appropriate, and promptly provide such information to the Healthcare Organisation as the Healthcare Organisation may reasonably require, to enable the Healthcare Organisation to comply with: 6.2.1.1 the rights of Data Subjects under the Data Protection Legislation, including subject access rights, the rights to rectify, port and erase Personal Data, object to the processing and automated processing of Personal Data, and restrict the processing of Personal Data; and 6.2.1.2 information or assessment notices served on the Healthcare Organisation by the Information Commissioner's Office under the Data Protection Legislation. 6.2.2 eConsult shall notify the Healthcare Organisation promptly in writing if it receives any complaint, notice or communication that relates directly or indirectly to the processing of the Personal Data or to either party's compliance with the Data Protection Legislation. 6.2.3 eConsult shall notify the Healthcare Organisation within 5 working days if it receives a request from a Data Subject for access to their Personal Data or to exercise any of their other rights under the Data Protection Legislation. Subject to clause 6.17, if eConsult receives a request or other correspondence from a Data Subject, and such communication relates to the Personal Data eConsult is processing on behalf of the Healthcare Organisation, eConsult shall be entitled to respond to the Data Subject directly, but only to the extent necessary to assist the Data Subject in raising their response directly with the Healthcare Organisation. The provisions of this clause requiring eConsult to notify the Healthcare Organisation do not apply in circumstances where eConsult is unable to identify which Healthcare Organisation the relevant Data Subject is linked to (such as where the only information eConsult has about that Data Subject following a communication from them is an email address or mobile phone number). 6.2.4 eConsult will give the Healthcare Organisation its full cooperation and assistance in responding to any complaint, notice, communication or Data Subject request. 6.2.5 eConsult shall not disclose the Personal Data to any Data Subject or to a third party other than in accordance with the Healthcare Organisation's written instructions, or as permitted by this Data Processing Agreement, or as required by domestic law.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Agreement
Rights of the Data Subject. 6.2.1 eConsult shall, at no additional cost to the Healthcare Organisation, take such technical and organisational measures as may be appropriate, and promptly provide such information to the Healthcare Organisation as the Healthcare Organisation may reasonably require, to enable the Healthcare Organisation to comply with:
6.2.1.1 the rights of Data Subjects under the Data Protection Legislation, including subject access rights, the rights to rectify, port and erase Personal Data, object to the processing and automated processing of Personal Data, and restrict the processing of Personal Data; and
6.2.1.2 information or assessment notices served on the Healthcare Organisation by the Information Commissioner's Office under the Data Protection Legislation.
6.2.2 eConsult shall notify the Healthcare Organisation promptly in writing if it receives any complaint, notice or communication that relates directly or indirectly to the processing of the Personal Data or to either party's compliance with the Data Protection Legislation.
6.2.3 eConsult shall notify the Healthcare Organisation within 5 working days if it receives a request from a Data Subject for access to their Personal Data or to exercise any of their other rights under the Data Protection Legislation. Subject to clause 6.17, if eConsult receives a request or other correspondence from a Data Subject, and such communication relates to the Personal Data eConsult is processing on behalf of the Healthcare Organisation, eConsult shall be entitled to respond to the Data Subject directly, but only to the extent necessary to assist the Data Subject in raising their response directly with the Healthcare Organisation. The provisions of this clause requiring eConsult to notify the Healthcare Organisation do not apply in circumstances where eConsult is unable to identify which Healthcare Organisation the relevant Data Subject is linked to (such as where the only information eConsult has about that Data Subject following a communication from them is an email address or mobile phone number).
6.2.4 eConsult will give the Healthcare Organisation its full cooperation co-operation and assistance in responding to any complaint, notice, communication or Data Subject request.
6.2.5 eConsult shall not disclose the Personal Data to any Data Subject or to a third party other than in accordance with the Healthcare Organisation's written instructions, or as permitted by this Data Processing Agreement, or as required by domestic law.
Appears in 1 contract
Sources: Data Processing Agreement