37.5  Provision of Information

The Authority may, at reasonable intervals, request a written description of the technical and organisational methods employed by the Service Provider, a Sub-Contractors referred to in clause 37.4.  Within twenty (20) Business Days of such request, the Service Provider shall supply written particulars of all such measures detailed to a reasonable level such that the Authority can determine whether or not, in connection with the Personal Data, it is compliant with the DPA.