Helena — Efterlevnad och NDA Skill med AI

$**Mutual Non-Disclosure Agreement (NDA)** This Mutual Non-Disclosure Agreement ("Agreement") is entered into as of [Date] by and between: **Party A:** [Your Company Name], with its principal place of business at [Address], and **Party B:** [Vendor Company Name], with its principal place of business at [Address]. **1. Purpose** The parties wish to explore a potential business relationship and, in connection with this, may disclose certain confidential and proprietary information to each other. **2. Definition of Confidential Information** "Confidential Information" means any information disclosed by either party to the other, either directly or indirectly, in writing, orally, or by inspection of tangible objects, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. **3. Obligations of Receiving Party** The receiving party shall: a) Use the Confidential Information solely for the purpose of evaluating or pursuing a business relationship; b) Restrict disclosure of the Confidential Information to its employees, agents, or third parties as necessary and only under confidentiality obligations at least as restrictive as those contained herein; c) Protect the Confidential Information with at least the same degree of care as it uses to protect its own confidential information, but in no event less than reasonable care; d) Not disclose Confidential Information to any third party without prior written consent of the disclosing party. **4. Exclusions from Confidential Information** Confidential Information does not include information that: a) Is or becomes publicly known through no breach of this Agreement; b) Is received from a third party without breach of any obligation of confidentiality; c) Is independently developed by the receiving party without use of or reference to the disclosing party’s Confidential Information; d) Is required to be disclosed by law or court order, provided the disclosing party is given prompt notice and opportunity to seek protective measures. **5. Term** This Agreement shall commence on the date first written above and continue for a period of [two (2)] years unless terminated earlier by either party with thirty (30) days written notice. **6. Return or Destruction of Materials** Upon termination or upon request, each party shall return or destroy all Confidential Information of the other party. **7. No License** Nothing in this Agreement grants any rights under any patent, copyright, or other intellectual property right. **8. Governing Law** This Agreement shall be governed by and construed in accordance with the laws of [Jurisdiction]. **9. Miscellaneous** This Agreement constitutes the entire agreement between the parties regarding the subject matter and supersedes all prior agreements. --- **GDPR Data Handling Gaps to Address:** 1. **Data Processing Details:** The NDA should specify how personal data will be processed, including the purpose, duration, and nature of processing, to comply with GDPR transparency requirements. 2. **Roles and Responsibilities:** Clarify whether each party acts as a data controller or processor, and define responsibilities accordingly. 3. **Data Subject Rights:** Include provisions ensuring both parties will assist each other in responding to data subject requests (access, rectification, erasure, etc.). 4. **Security Measures:** Specify the technical and organizational measures to protect personal data. 5. **Data Breach Notification:** Define obligations to notify each other and relevant authorities in case of a personal data breach within GDPR timelines. 6. **International Data Transfers:** Address any cross-border data transfers and ensure appropriate safeguards are in place. 7. **Subprocessors:** If applicable, include terms about engaging subprocessors and ensuring they comply with GDPR. To fully comply with GDPR, consider drafting a separate Data Processing Agreement (DPA) or incorporating these elements explicitly into the NDA. Consulting with legal counsel specialized in data protection is recommended.