Thank you all for your work on this, Seth, Susan and Lynn. I think the findings in particular are now very strong, and lead nicely into our recommendations. One small thing - we mention in the findings about the privacy principle of informed consent to data processing (not the exact language used, but that's the idea) - I noticed that the RAA does require this to be done, so it's another example where the contractual provisions are there, it's just that they don't seem to be filtering through to the end user. Kind regards Emily On 29 November 2011 15:22, <lynn@goodsecurityconsulting.com> wrote:

Seth, Susan and I have been working via email due to our time zone differences. I am waiting for Seth to confirm but believe we have come to an agreement on our revisions and edits.

Attached is our clean updated draft and our most recent marked up copy with comments.

Since we are so close to the deadline, I am taking the liberty of sending this forward now. Lynn

-- * * 76 Temple Road, Oxford OX4 2EZ UK t: +44 (0)1865 582 811 • m: +44 (0)7540 049 322 emily@emilytaylor.eu *www.etlaw.co.uk* Emily Taylor Consultancy Limited is a company registered in England and Wales No. 730471. VAT No. 114487713.