• GBG hosts the Supplier Data
• No personal data is transferred to the Supplier

NOTE:  GBG is currently undertaking a migration project with the Supplier and moving to a new API for this Dataset.  Once this is complete with all End Users GBG will no longer host the Supplier Data. 

The Supplier Data used to provide the Enhanced PEP Intelligence Dataset and the Enhanced Sanctions and Enforcements Dataset is provided by GBG’s Supplier. GBG is obliged under the terms of its agreement with the Supplier to ensure that all End Users agree to comply with the following licensing provisions:

1. DEFINITIONS
1.1. In these Additional Terms the following definitions shall apply, in addition to the definitions set out in the General Terms and the Product Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:
• ID Verification – Fraud
• ID Verification - Regulatory
2.2. The End User warrants that it will not use the Dataset for any reason outside of the Customer Use Case.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 GBG provides this Dataset in its capacity as an independent controller.
3.2 Until the End User successfully actives the new API, GBG will not transfer End User Data to the Supplier to provide this Dataset.

3.3 Upon successful activation of the new API Service, the following terms shall also apply, in addition to the terms above:

(a) The Supplier Data used to provide you this Dataset is hosted by the Supplier in the United Kingdom.  In order to deliver this Dataset, the Supplier shall receive and process End User Data in its capacity as an independent controller; and 

(b) The Supplier is based in the United Kingdom.  The United Kingdom is deemed to offer an adequate level of data protection for personal data by the European Commission, therefore the Parties acknowledge that End User Data can be safely transferred to the Supplier for processing without further data export safeguards.