This precedent uses the additional defined terms ‘Agreement’, ‘Business Day’, ‘Charges’, ‘Customer’, ‘Services’, ‘Supplier’ and ‘Supplier Personnel’, which are not specific to data processing and which it is assumed are separately defined in the relevant agreement.

The Schedule

Part A: Operative provisions

1. 1. 1

      Definitions

      1. 1.1

         In this Schedule:

         Controller

         1. •

            has the meaning given in applicable data protection Laws from time to time;

         Data Protection Laws

         1. •

            means, as binding on either party or the Services:

            1. (a)

               the EU GDPR;

            2. (b)

               the UK GDPR and the UK DPA 2018;

            3. (c)

               any laws which implement or supplement any such laws; and

            4. (d)

               any laws that replace, extend, re-enact, consolidate or amend any of the foregoing;

         Data Subject

         1. •

            has the meaning given in applicable Data Protection Laws from time to time;

         EEA Data Protection Laws

         1. •

            means Data Protection Laws applicable under the laws of the European Economic Area, the European Union or any of their member states;

         EEA Protected Data

         1. •

            has the meaning given in paragraph 4.2 of this Part A;

         EU GDPR

         1. •

            means the General Data Protection Regulation, Regulation (EU) 2016/679;

         GDPR

         1. •

            means the EU GDPR and UK GDPR (as applicable in the circumstances);

         Personal