Schedule 2Data ProtectionThe Provider warrants and undertakes that: (a) It will have in place reasonable measures to ensure that personal data is protected against loss and unauthorized disclosure, access, use and modification. (b) It will have in place procedures so that any third party it authorizes to have access to the personal data, including processors, will respect and maintain the confidentiality and security of the personal data. Any person acting under the authority of the Provider, including a data processor shall be obligated to process the personal data only on instructions from the Provider. This provision does not apply to persons authorized or required by law or regulation to have access to the personal data. (c) It will permit INTL.SOS, its agents, representatives or the data protection authority to audit its facilities to ascertain compliance with the terms and conditions of this Agreement with reasonable notice and during regular business hours.(d) It will process the personal data in accordance with all of the following principles:1. The informed consent of or on behalf of the data subject will be obtained to receive, use, process and transfer their personal data. A data subject refers to a living individual or a deceased individual.2. Personal data shall be obtained for a specified and lawful purpose and shall not be processed in a manner incompatible with that purpose.3. Personal data shall be adequate, relevant and not excessive in relation to the purposes for which they are processed.4. Personal data shall be accurate and kept up to date.5. Personal data must not be kept for longer than is necessary for the purpose.6. Personal data shall be processed in accordance with the rights of data subjects.7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing, accidental loss or destruction or damage to, personal data. 8. It shall not disclose or transfer all or any of the personal data to any third party located outside Singapore without the prior written informed consent of the data subject or the prior written consent of INTL.SOS which shall be given in INTL.SOS’ sole discretion having regard to whether such third party has an adequate level of data protection for personal data.(e) It shall promptly notify INTL.SOS about a request for disclosure of personal data by a regulatory or governmental authority.
đang được dịch, vui lòng đợi..