22.1 In relation to all Personal Data, the Parties shall at all times comply with the DPA as a data controller if necessary, including maintaining a valid and up to date registration or notification under the DPA covering the data processing to be performed in connection with this Agreement.
22.2 The Parties shall only undertake processing of Personal Data reasonably required in connection with this Agreement and shall not transfer any Personal Data to any country or territory outside the European Economic Area.