The following terms apply when a Customer is subject to PIPEDA when sending Customer Data or receiving Results from a GBG Entity. Local Laws are supplementary to the General Terms agreed by the Parties and referenced in the Order Form and shall, together with the Product Terms apply to the provision of the Service purchased by the Customer Entity from the GBG Entity. Where there is a conflict between the General Terms and these Local Laws, these Local Laws shall take precedence.

1 DEFINITIONS

Capitalized terms not defined will have the meanings ascribed to them in the Agreement.

“PIPEDA” means the Personal Information Protection and Electronic Documents Act 2000.

2 PIPEDA OBLIGATIONS

2.1 Each Party represents and warrants that it shall comply with all requirements under PIPEDA and any other applicable provincial Canadian data privacy legislation (collectively “Canadian Privacy Laws”).

2.2 To ensure compliance with clause 2.1 above, the Customer Entity represents and warrants that it shall:

(a) comply with and obtain any necessary permissions and consents (implied or explicit, as required under the applicable Canadian Privacy Laws) for the GBG Entity to perform its service obligations under the Agreement; and

(b) retain evidence of such permissions or consents as required under applicable Canadian Privacy Laws and shall on request from a GBG Entity, provide evidence in a machine portable manner; and

(c) have in place a transparent and compliant privacy statement in compliance with applicable Canadian Privacy Laws;