66. The contractor must—
(a)take all reasonable steps to ensure the accuracy of patient records;
(b)verify the accuracy of any templates and notices provided to it by the Health Board in accordance with paragraph 67(b), and once verified, use such templates and notices;
(c)comply with the Health Board’s current policies concerning data security, personal data or IT security notified by the Health Board to the contractor under paragraph 67(c);
(d)maintain a record of all of the contractor’s processing activities carried out in performance of the contract and make the records available to the Health Board on request; and
(e)ensure that any person under its direction who has access to patient records has undergone adequate data protection training.