8.1 ICBCTL shall, and shall procure that the Designated Employees shall, at all times during the Term (and for such additional period as is necessary to ensure compliance with the Regulatory Requirements), comply with the procedures and requirements as to confidentiality, data security and data protection as stipulated out in all applicable laws and regulations and such other policies, materials or requirements as the Bank and ICBCTL may from time to time agree in writing.
8.2 In addition, ICBCTL shall also implement the security and data protection measures; an emergency procedure for the termination of data transfer, increased checks of the data accesses made by staff; access to processing areas to be restricted as per Clause 8.3 below and the installation of an access control system where appropriate.
8.3 Access to areas processing data for the Bank will be restricted solely to the Designated Employees processing data for the Bank and, in case of need, persons authorised by ICBCTL to access such areas to perform a necessary service or function.