Addendum to XXXXXXXXXX

(Annex XXXXXX, Valid from: 25May 2018)

Between XXXXXXXXXX

Having its principal office at: XXXXXXXXX

XXXXXXXXXXX
XXXXXXXXX
XXXXXXXXX

Hereinafter referred to as ”XXXXXX”

and Kenya Airways PLC

Having its principal office at : Jomo Kenyatta International Airport

P.O.Box 19002-00501

Embakasi Kenya

Hereinafter referred to as “XXXXXXXXX”

Is valid from 25 May 2018

Pertaining to the existing XXXXXXXXX agreement (XXXXXXXXXXXXXX) between

XXXXXXXX andXXXXXXXX, this addendum is prepared to incorporate terms on data

protection.
PARAGRAPH 16. DATA PROTECTION

16.1 Each Party shall, in its collection, processing, disclosure or other use ("Use")
of any information and data which can be related to an identifiable individual
("Data"), for any purpose arising out of or in connection with this Agreement,
adhere to the requirements of all applicable laws, regulations or legal
requirements, including but not limited to all that relate to data protection,
and privacy ("Law"). Without prejudice to the generality of the foregoing,
each Party shall, where required and in the manner required by Law: (a) use
Data only for purposes arising out of or in relation to this Agreement, and
only after notifying or obtaining the consent of the individual to whom the
Data relates ("Subject Individual"); (b) provide Subject Individuals with
access to their Data and the ability to correct such Data upon request; (c)
use reasonable efforts to ensure the accuracy of Data; (d) institute
reasonable security arrangements to protect the Data; (e) securely destroy
the Data where it is no longer required; and (f) transfer Data only as
prescribed by Law.

In respect of any Data provided to any Party (the "Data Receiving Party") by
the other Party (the "Data Disclosing Party"), the Data Receiving Party shall
return or destroy the Data forthwith upon being required by the Data
Disclosing Party or immediately without request upon the expiry or
termination of this Agreement.

From time to time on request by the Data Disclosing Party, the Data
Receiving Party will do or procure the doing of all such acts and execute or
procure the execution of all such documents as the Data Disclosing Party
may consider necessary or desirable for compliance with any applicable laws
or legal requirements, including but not limited to all that relate to data
protection, and privacy.

Notwithstanding the termination of this Agreement, the Data Receiving Party

shall be liable for and keep the Data Disclosing Party fully indemnified against
all damage, losses, costs, legal fees (solicitor-client basis), penalties and
proceedings, including any penalties or other amounts levied, imposed or
charged by any regulator or regulatory authority, arising out of or in
connection with an act or omission of Data Receiving Party or any of its
officers, employees, advisors, agents and representatives, in relation to this
 Clause

Conditions

All other terms and conditions of the existing XXXXX agreement between the two
parties shall remain unchanged and shall be applicable to this addendum.

signed the signed the

at: XXXXXXX at Nairobi,

for and on behalf of XXXXX for and on behalf of Kenya

XXXXXXXXX Airways plc
“XXXXXXXXXX” “XXXXXXXXXX

By:…………………………….. By:……………………………………
XXXXXXXXX
XXXXXXXXX

By:………………………………………