In performing the Services ITSL undertakes to comply with ,provisions set out in the General Data Protection Regulation (GDPR) ,(Regulation (EU) 2016/679) as "Data Processor", including ,implementing adequate measures for preventing third party access ,to the information, protection against unintended changes or loss of ,the information and ensuring that the processing is based on ,sufficient and relevant information. ,For customers required to comply with the GeneralData Protection ,Regulation (GDPR) (Regulation (EU) 2016/679), the following ,applies:,ITSL and the Customer must enter into a separate Data Processing ,Agreement (DPA).