¶¶Òõ¶ÌÊÓƵ

1. Sub-processing: Terms for engaging sub-processors, to be included when the data importer may use third parties for processing

2. Special Categories of Data: Additional safeguards for sensitive personal data, required when transferring health, religious, or other sensitive information

3. Data Localization Requirements: Specific provisions for financial or other regulated data subject to State Bank of Pakistan requirements

4. Industry-Specific Compliance: Additional requirements for specific sectors like healthcare or financial services

5. Data Minimization and Retention: Specific provisions on data retention periods and minimization principles, when required by specific industry standards

6. Cross-Border Transfer Impact Assessment: Documentation of transfer impact assessment when transferring to countries without adequate protection levels

1. Schedule 1 - Description of Transfer: Detailed description of the data transfer including data categories, subjects, purposes, and frequency

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented by both parties

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their roles, if applicable

4. Schedule 4 - Transfer Impact Assessment: Documentation of the assessment of risks and safeguards for the transfer

5. Appendix A - Data Processing Details: Specific details about processing activities, including systems used and data flows

6. Appendix B - Contact Points: List of key contacts for data protection matters at both organizations