Extract to table

1 Key Definitions For the purposes of this Procedure, the following terms shall have the meanings set out below, unless the context requires otherwise

Where terms are defined in the UK GDPR, the EU GDPR, or the DPA 2018, those statutory definitions shall apply and the definitions below are provided for convenience and operational clarity

(c) Employee reports: Any NTP employee or contractor who becomes aware of, or suspects, a personal data breach is required to report it immediately in accordance with Section 3

The notification must include the information specified in Article 33(3) of the GDPR

(c) All current and future data processor contracts must include mandatory breach notification clauses, as specified in NTP's standard data processing agreement template

Any NTP employee, contractor, or temporary worker who becomes aware of a suspected or actual personal data breach must report the incident immediately and without delay