Extract to table

Pinnacle itself engages sub-processors located outside the European Economic Area, creating onward transfer obligations that must be addressed within this engagement

A preliminary assessment is required to determine whether Moritaka acts as a data processor or as a joint controller with NTP in respect of this processing

The successful completion of Phase 1 within the established timeline is dependent on the following: • NTP business units across the UK and all five EU subsidiaries must complete and return data mapping questionnaire responses by 20 March 2023

• Thomas Okoye must provide technical controls documentation for biometric access control and CCTV systems to enable the preparation of DPIA-005 and DPIA-008

• Thomas Okoye must confirm NTP's encryption and pseudonymisation standards to enable the drafting of SCC Annex II and the supplementary measures analysis in the TIAs