Each party’s organization is responsible for maintaining, with regard to the data in its possession, appropriate technical and organizational measures needed to respond to requests from Data Subjects to access, correct, transmit, limit Processing of, or delete any relevant Personal Information.