An SPHR is designing a vendor risk management program for HR service providers who handle employee data. Which contractual provision is most critical?
-
A
A most-favored-nation pricing clause
-
B
A data processing agreement specifying security obligations and breach notification timelines
-
C
An exclusivity clause preventing the vendor from serving competitors
-
D
A force majeure clause covering labor shortages