Extract to table

It must not be disclosed to any third party without the prior written consent of Calderwood & Harkness LLP and Northgate Telecommunications PLC

The supplementary measures must be fully implemented in accordance with the timelines set out in Section 7

1, and compliance must be verified through the audit process established under the Amended DPA

The Schrems II judgment invalidated the EU-US Privacy Shield and confirmed that data exporters relying on Standard Contractual Clauses must assess, on a case-by-case basis, whether the law and practices of the third country of destination ensure an essentially equivalent level of protection

Where such protection is not ensured by the transfer tool alone, the data exporter must adopt supplementary measures or suspend the transfer

Under the provisions of the Amended DPA and the sub-processing agreement between Pinnacle and Pinnacle India, such temporary data extracts are required to be encrypted at rest on Pinnacle India systems, and must be securely deleted within 72 hours of resolution of the relevant incident