Data sharing schedule—GDPR compliant—short form—controller to controller—pro-disclosing party
Data sharing schedule—GDPR compliant—short form—controller to controller—pro-disclosing party

The following Commercial guidance note provides comprehensive and up to date legal information covering:

  • Data sharing schedule—GDPR compliant—short form—controller to controller—pro-disclosing party
  • The ScheduleSharing Personal Data

Produced in partnership with Daradjeet Jagpal of Information Law Solutions

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see Practice Notes: Brexit—implications for data protection, Brexit—drafting boilerplate clauses and Brexit—drafting commercial clauses.

The Schedule
Sharing Personal Data

  1. 1

    Definitions and interpretation

    1. 1.1

      In this Schedule:

    2. Complaint

      1. means a complaint or request (other than a Data Subject Request) relating to either party’s obligations under Data Protection Laws relevant to this Agreement and/or the processing of any of the Shared Personal Data, including any compensation claim from a Data Subject or any notice, investigation or other action from a Data Protection Supervisory Authority relating to the foregoing (and Complainant means the Data Protection Supervisory Authority, Data Subject or other person initiating or conducting a Complaint);

      Controller

      1. has the meaning given in applicable Data Protection Laws;

      Data Protection Laws

      1. means, as applicable to either party and/or to [insert reference to relevant activities eg the rights, responsibilities and/or obligations of either party in connection with this Agreement]:

        1. (a)

          the GDPR;

        2. (b)

          the Data Protection Act 2018;

        3. (c)

          the Directive 2002/58/EC (ePrivacy Directive) and/or the Privacy and Electronic Communications (EC Directive) Regulations 2003;

        4. (d)

          any other applicable law relating to the processing, privacy and/or