Contractual standards for Data Processing on Behalf, last revised December 8, 2014 c) Please use the following field (free text) for details of additional or other measures you have implemented or if you would like to provide more specific information on the above items: (Please use additional sheet if necessary.) d) If availability control is not relevant to the services subject to this Agreement, please briefly state the reasons below: (Please use additional sheet if necessary.) 8. Segregation principle Definition: The segregation principle requires the implementation of measures to ensure that data collected for different purposes can be processed separately. a) Who holds overall responsibility for implementing and ensuring compliance with the segregation principle? Controller Processor b) What action is taken to implement the segregation principle and who carries out this action? (Please select appropriate answers and mark with a cross, as applicable) Co Pr • Segregation of functions documented ......................................................................... ☐ ☐ • Policies and procedural instructions in place ............................................................... ☐ ☐ • Procedure documentation in place .............................................................................. ☐ ☐ • Multi-client capability: o Physical separation ........................................................................................ ☐ ☐ o Separation at system level ............................................................................. ☐ ☐ o Separation at data level ................................................................................ ☐ ☐ Page 16 of 20