Lead Systems and Re-Invent Health acknowledges that in providing services to the user, it will have access to Personal Information relating to the User. Accordingly, Lead Systems and Re-Invent Health agrees that it shall only store, copy or use Personal Information disclosed to it by the User or which it has access to as part of providing the services to the extent necessary to perform its obligations under this Agreement nor otherwise modify, amend or alter the contents of the Personal Information or disclose or permit the disclosure of any of the Personal Information to any Third Party (save as set forth in clause 12.2.1.3 hereunder) and shall treat the Personal Information as strictly confidential, in compliance with the provisions of clause 12.
Other than in respect of authorised Personnel who require access to such Personal Information strictly in order for Lead Systems and Re-Invent Health to carry out its obligations under this Agreement, Lead Systems and Re-Invent Health shall not disclose or otherwise make available the Personal Information to any Third Party (including Approved Subcontractors and Personnel), except if the User has provided its prior written permission to do so. The User shall require of all such Third Parties, appropriate written undertakings to be provided, containing similar terms to that set forth in this clause 12, dealing with that Third Party's obligations in respect of its Processing of the Personal Information. Following approval by the User, Lead Systems and Re-Invent Health agrees that the provisions of this clause 12 shall mutatis mutandis apply to all authorised Third Parties who process Personal Information of User. Lead Systems and Re-Invent Health undertakes to ensure that all authorised Third Parties who process Personal Information of User shall not amend, modify, merge or combine such Personal Information.
Lead Systems and Re-Invent Health shall keep all Personal Information and any analyses, profiles or documents derived therefrom separate from all other data and documentation of Lead Systems and Re-Invent Health.
Lead Systems and Re-Invent Health shall implement appropriate, reasonable technical and organisational measures to ensure that the integrity of the Personal Information in its possession or under its control is secure and that such Personal Information is protected against unauthorised or unlawful processing, accidental loss, destruction or damage, alteration, disclosure or access by having regard to any requirement set forth in law, stipulated in industry rules or in codes of conduct or by a professional body and/or generally accepted information security practices and procedures which apply to Lead Systems and Re-Invent Health and to the User.
Lead Systems and Re-Invent Health shall also be required to carry out regular assessments to identify all reasonably foreseeable internal and external risks to the Personal Information in its possession or under its control, at least once in every 12 (twelve) month period and to provide the User with a written report in this regard. Lead Systems and Re-Invent Health shall be required to implement and maintain appropriate safeguards against the risks which it identifies and shall also regularly verify that the safeguards which Lead Systems and Re-Invent Health has in place have been effectively implemented. Further, Lead Systems and Re-Invent Health shall ensure that the safeguards are continually updated in response to new risks or deficiencies in previously implemented safeguards. Lead Systems and Re-Invent Health shall advise the User in writing of all updates and new safeguards which it implements.