60.1 For the purpose of the following Clauses, the term "personal data" shall have the meaning given to it in the Data Protection Act 1998.
60.2 Sub-hubco undertakes to the Authority that it shall comply with the obligations of a "data controller" under the provisions of the Seventh Data Protection Principle as set out in Schedule 1 of the Data Protection Act 1998. In addition, Sub-hubco:
60.2.1 warrants that it has, or will have at all material times, (and it shall use best endeavours to procure that all Sub Contractors (and their agents and subcontractors of any tier have or will have at all material times) the appropriate technical and organisational measures in place against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data held or processed by it and that it has taken, or will take at all material times, all reasonable steps to ensure the reliability of any of its staff which will have access to personal data processed as part of the Project Operations;
60.2.2 undertakes that it will act only on the instructions of the Authority in relation to the processing of any personal data made available by or on behalf of the Authority as part of the Project Operations;
60.2.3 undertakes that it will only obtain, hold, process, use, store and disclose personal data as is necessary to perform its obligations under this Agreement and (without prejudice to Clause 5.2 (General standards)) that such data will be held, processed, used, stored and disclosed only in accordance with the Data Protection Act 1998 and any other applicable Law; and
60.2.4 undertakes to allow the Authority access to any relevant premises on reasonable notice to inspect its procedures described at Clause 60.2.1 above.