• Data Supplier hosts the Supplier Data
• The Data Supplier receives and processes End User Data in its capacity as an independent controller
• End User Data includes Personal Data
• The Data Supplier is located in the United States
• The Data Supplier is located outside of the EEA and the United Kingdom
• GBG has an arrangement in place with the Data Supplier to maintain appropriate safeguards

The Supplier Data used to provide 0539 International Sanctions (non-FCRA) Dataset is provided by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with the Data Supplier to ensure that all End Users agree to comply with the following licencing provisions.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any Personal Data.
“FCRA” refers to the Federal Fair Credit Reporting Act, 15 USC 1681 et seq., including, without limitation, all amendments thereto.
“Permitted Purpose” means the use of the Supplier Data solely for the purpose of identity verification and/or fraud prevention.
"Standard Contractual Clauses" means: (i) where the EU GDPR applies, the contractual clauses annexed to the European Commission's Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council ("EU SCCs"); and (ii) where the UK GDPR applies, standard data protection clauses in the form of the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses adopted pursuant to or permitted under Article 46 of the UK GDPR ("UK SCCs").

2. USE OF THE SUPPLIER DATA
2.1. The Supplier Data may only be used for the Permitted Purpose in accordance with these terms.
2.2. The End User acknowledges that GBG and its Data Supplier don’t act as “consumer reporting agencies” for the purpose of the delivery of the Services nor is the data a “consumer report” as those terms are used and defined by the FCRA.
2.3. The End User acknowledges that the Services do not constitute consumer report information, subject to the FCRA (or similar state consumer reporting acts), and shall not be used as such.
2.4. The End User shall not use the Services, in whole or in part, as a factor in establishing a consumer’s creditworthiness or eligibility for credit, insurance, employment, or for any other purposes under the FCRA.
2.5. The End User warrants that it will not use the Supplier Data for any reason outside of the Permitted Purpose, and shall not forward, send or disseminate the Supplier Data or information contained within to any other party.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 The Supplier Data used to provide this Dataset is hosted by the Data Supplier in the United States. In order to deliver the Dataset, the Data Supplier shall receive and process End User Data in its capacity as an independent controller.
3.2 GBG has entered into Standard Contractual Clauses with the Data Supplier to ensure safe onward transit of End User Data.