For the purposes of this Clause:
“Data Subject” means any identified or identifiable natural person, including Crew.
“Personal Data” means any information relating to any Data Subject connected with the Crew Management Services.
“DPR” means any data protection regulations applicable to the Parties in relation to the Crew Management Services, including the European Union General Data Protection Regulation (GDPR).
(a) The Parties shall each ensure compliance with the DPR in respect of Personal Data, with particular regard to:
(i) its collection and use;
(ii) its safeguarding;
(iii) any transfer to third parties;
(iv) its retention; and
(v) the protection of Data Subjects’ rights.
(b) The Parties shall have proper notification and response procedures for any Personal Data breach.
(c) The Parties agree to conduct or submit to audits or inspections in accordance with the DPR.
The BIMCO Personal Data Protection Clause has been developed in response to concerns raised by owners, ship and crew managers and operators about the implications of the EU General Data Protection Regulation (GDPR) and similar legislation. It addresses the need for compliance with data protection legislation including obligations for monitoring and auditing compliance.
The clause is based on the obligations and provisions under, and takes account of the principles set out in, GDPR. However, it does not replace parties’ obligations to ensure that they have suitable data protection policies in place. The purpose of the clause is to require parties to confirm their compliance with relevant data protection regulations.
The clause is a free-standing additional clause and parties should consider its use in the context of legislation relevant and applicable to them.
Personal data management is a matter of corporate governance with entities and organisations responsible for the integrity and lawful use of the data they collect. Companies should, therefore, develop procedures to ensure that their arrangements for gathering and maintaining information comply with applicable legislation; that information is collected for legitimate business reasons which might include details of seafarers’ dependents or next of kin; that internal systems are sufficiently robust to secure and preserve stored details; that information is kept only for legitimate business purposes and for as long as it is required (although this might include periods after termination of employment so that records are to hand in the event of future claims for injury or ill-health); that systems are in place to prevent misuse; and that procedural safeguards ensure the integrity of data shared with third parties or transmitted from one jurisdiction to another.
GDPR took effect on 25 May 2018 and updates legislation first introduced in Europe over twenty years ago. The principles are not new and similar provisions apply in other jurisdictions. However, GDPR imposes greater obligations on organisations in respect of the collection, use and retention of personal information, strengthens individuals’ rights to privacy, requires any breach of data security to be reported and sets out the basis for potentially large fines for non-compliance. GDPR has extra-territorial effect and applies to data processed within the EU regardless of whether it is to be used within or beyond Member States. It also applies where information processed outside the EU relates to persons or undertakings within or with a connection to a Member State.
Guidance has been issued by the European Commission covering the transfer of personal data from data controllers in the EU to data controllers and processors outside the EU or European Economic Area (EEA). Model contracts have been developed and details can be downloaded from:
BIMCO wishes to thank the following members for their work in developing the new provision:
There are four versions of the clause for use respectively with SHIPMAN, CREWMAN, SUPPLYTIME and GUARDCON. The underlying content is the same for each but with minor differences in wording reflecting the specific agreement and categories of personnel covered.
“Data Subject” covers any identified or identifiable “natural” (i.e. living) person;
“Personal Data” relates to any information about any Data Subject covered by the underlying agreement;
“DPR” refers to data protection regulations and is the catch-all phrase meaning any such applicable legislation. While not strictly necessary in a provision for worldwide use, it is expressly stated that the term includes GDPR;
Sub-clause (a) sets out the parties’ respective duties for compliance with their DPR obligations for the collection and use, safeguarding, transfer and retention of information and protection of Data Subjects’ rights as enumerated at sub-paragraphs (i) to (iv);
Sub-clause (b) requires arrangements to be in place for dealing with, and notifying regulatory authorities about, any breach of data security; and
Sub-clause (c) requires party cooperation in relation to auditing company data protection systems and procedures.
The one-stop digital shop for all the standard maritime contracts and clauses you’ll ever need.
Although the container ship “Ever Given” was fortunately freed after less than a week blocking the Suez Canal, the consequences for owners and operators due to the delays caused may last for several weeks or even months.
Refund guarantees are complex legal documents and must meet the requirements of the issuing banks. BIMCO has, in close co-operation with legal and commercial experts, banks and shipyards, been working to develop a standard refund guarantee which can be used for shipbuilding contracts, such as SAJ.
In a clear sign of industry support for BIMCO’s initiative to develop a new ship sale and purchase agreement, the organisation has received over 800 individual comments on its consultation draft, which will shape the final version of the agreement.
This year, BIMCO has expanded its ice reporting to cover the Northern Chinese, Japanese and Greenland sea areas, and can advise on contractual issues related to ice clauses.
The development of a new BIMCO Force Majeure Clause is progressing and continued last week as the subcommittee met to draft a bolt-on provision relating to situations when cargo has been loaded onto the ship and a party declares force majeure.
BIMCO's Holiday Calendar covers general holidays in over 150 countries, plus local holidays and working hours in more than 680 ports around the world.
For general guidance and information on cargo-related queries.