Extract to table

Total fees billed to this matter shall not exceed $240,000 without prior written approval from the Client

Key Regulatory Considerations The DPA/SCC package must be drafted and negotiated with careful attention to the following regulatory frameworks, each of which imposes obligations on one or both parties: 12

Because Skybridge is providing critical activities—specifically, real-time payment processing and anti-fraud analytics—to a federally chartered savings bank, the DPA must include contractual provisions that satisfy the OCC's requirements for agreements with critical third-party service providers

The DPA must also be structured to facilitate Meridian's ongoing monitoring and oversight obligations with respect to Skybridge as a critical service provider

The DPA must include provisions sufficient to satisfy Meridian's obligations under GLBA's service-provider oversight requirements

Under Schrems II, data exporters must conduct a case-by-case assessment (a "Transfer Impact Assessment") to determine whether the laws and practices of the data-importing country ensure an essentially equivalent level of protection for transferred personal data, and must implement supplementary measures if necessary