9.1  In relation to all Personal Data, the Recipient shall (and shall procure that any of its staff, agents, contractors or others involved in connection with the Project shall) at all times comply with all applicable requirements of the Data Protection Legislation as a data controller, including, where required, maintaining a valid and up to date registration or notification under the Data Protection Legislation covering the data processing to be performed in connection with the Project.

9.2  The Recipient (including any staff, agents, contractors or others involved in connection with the Project) shall only undertake processing of Personal Data reasonably required in connection with the Project and shall not transfer any Personal Data to any country or territory outside the European Economic Area.

9.3  This clause 9 is in addition to, and does not relieve, remove or replace, the Recipient’s obligations under the Data Protection Legislation.