Compliance with Data Protection Laws. With regard to any personal data processed by PayPal and the merchant in connection with this Agreement, PayPal and the merchant will respectively each be a controller in respect of such processing. PayPal and the merchant agree to comply with the requirements of the Data Protection Laws applicable to controllers in respect of the provision of their respective services and otherwise in connection with this Agreement. For the avoidance of doubt, PayPal and the merchant each have their own, independently determined privacy policies, notices and procedures for the personal data they hold and are each a data controller (and not joint data controllers). In complying with the Data Protection Laws, PayPal and the merchant shall, without limitation:
implement and maintain at all times all appropriate security measures in relation to the processing of personal data; maintain a record of all processing activities carried out under this Agreement; and not knowingly do anything or permit anything to be done which might lead to a breach by the other party of the Data Protection Laws.