Undertakings of both Parties. 2.1 The Supplier and the Buyer each undertake that they shall: 2.1.1 report to the other Party every 3 months on: 2.1.1.1 the volume of Data Subject Access Requests (or purported Data Subject Access Requests) from Data Subjects (or third parties on their behalf); 2.1.1.2 the volume of requests from Data Subjects (or third parties on their behalf) to rectify, block or erase any Personal Data; 2.1.1.3 any other requests, complaints or communications from Data Subjects (or third parties on their behalf) relating to the other Party’s obligations under applicable Data Protection Legislation; 2.1.1.4 any communications from the Information Commissioner or any other regulatory authority in connection with Personal Data; and 2.1.1.5 any requests from any third party for disclosure of Personal Data where compliance with such request is required or purported to be required by Law, that it has received in relation to the subject matter of the Contract during that period; 2.1.2 notify each other immediately if it receives any request, complaint or communication made as referred to in Paragraphs 2.1.1.1 to 2.1.1.5 of this Part B Joint Controller Agreement (Optional) of Annex 1 – Processing Personal Data; 2.1.3 provide the other Party with full cooperation and assistance in relation to any request, complaint or communication made as referred to in Paragraphs 1.2 and 2.1.1.3 to
Appears in 1 contract
Sources: Short Form Contract for the Supply of Goods and/or Services
Undertakings of both Parties.
2.1 38.1 The Supplier and the Buyer each undertake that they shall:
2.1.1 38.1.1 report to the other Party every 3 months on:
2.1.1.1 38.1.1.1 the volume of Data Subject Access Requests (or purported Data Subject Access Requests) from Data Subjects (or third parties on their behalf);behalf);
2.1.1.2 38.1.1.2 the volume of requests from Data Subjects (or third parties on their behalf) to rectify, block or erase any Personal Data;
2.1.1.3 38.1.1.3 any other requests, complaints or communications from Data Subjects (or third parties on their behalf) relating to the other Party’s obligations under applicable Data Protection Legislation;Legislation;
2.1.1.4 38.1.1.4 any communications from the Information Commissioner or any other regulatory authority in connection with Personal Data; and
2.1.1.5 38.1.1.5 any requests from any third party for disclosure of Personal Data where compliance with such request is required or purported to be required by Law, Law, that it has received in relation to the subject matter of the Contract during that period;
2.1.2 38.1.2 notify each other immediately if it receives any request, complaint or communication made as referred to in Paragraphs 2.1.1.1 to 2.1.1.5 of this Part B Joint Controller Agreement (Optional) of Annex 1 – Processing Personal Data;
2.1.3 38.1.3 provide the other Party with full cooperation and assistance in relation to any request, complaint or communication made as referred to in Paragraphs 1.2 and 2.1.1.3 to
Appears in 1 contract