DATA PROCESSING UNDER THE GDPR
Each Party shall comply with the requirements of any relevant data protection legislation (which may include, for example, the European Union’s (EU) General Data Protection Regulation EU 2016/679 (GDPR) and the United Kingdom’s (UK) Data Protection Act 2018 (DPA 2018)) applicable to that Party when processing the personal data of its own employees (including subcontractors or agents), or of the employees of the other Party. Each Party confirms that it has taken appropriate measures against unauthorized or unlawful or accidental processing loss, destruction, alteration, damage to, or disclosure of such data.
Each Party recognizes that, during the course of this Agreement, it may provide personal information (such as name, job title, business e-mail, and telephone contact details) of its staff involved in the performance of the Agreement. Each Party accordingly understands and agrees that such information will be used by the other Party for the purpose of and in connection with performing this Agreement and that as a result, such information may be made available to employees of such other Party, irrespective of where such employees are located.