Allocation of roles
Which party is controller and which is processor, and the scope of processing instructions, are set out in this section.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Subprocessors
The list of subprocessors, the change notification process and the objection process are defined in this section.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
Security measures and breach notification
Technical and organisational measures and breach notification timeframes are set out in this section.
The final text of this section must be prepared by a qualified legal adviser and verified against the applicable regulation.
This section must be completed by the clinic owner and their legal adviser before launch.