1. Short Form Contract – List of Changes

1.1 Short Form Contract v1.5 from previous version (Short Form Contract v1.4)

Key thematic updates:

• Updating to reflect the Procurement Act 2023;

• Updating as required by PPNs – withdrawn, added, reissued;

• New optional Security Annex;

• Updates to reflect the latest UK & EU ‘adequacy decision’ in relation to the US, including reflecting this potential mechanism for transferring and protecting personal data;

• Updating the definition of Supplier Staff.

Note: The list is divided into ‘themes’ for ease of use. Corrections of typos, very minor amendments, and renumbered cross-references may not be listed.

Every effort has been made to create a fulsome list of the changes at an overview level. For a full picture of the changes, and to see all relevant clause references, please see the Short Form Contract Compare Document, comparing this version 1.5 against the previous version 1.4.

Clause numbers refer to the clauses as numbered in v1.4, unless otherwise stated. Please email modelservicescontract@cabinetoffice.gov.uk

2. List of changes by contract reference:

2.1 Procurement Act 2023 (‘PA2023’) changes (and accompanying Regulations & Guidance)

General Contract Reference	Area	Change and Specific Contract Reference (previous v 1.4 specific references, v 1.5 may be slightly differently numbered)
Throughout the contract	New PA2023 version of contract - overview	(a)Creating a new version of the contract, reflecting the new PA2023 and associated Regulations & Guidance. This includes all the other changes set out in the contract, and the PA2023-specific changes listed below (b)As with the previous version, the new PA2023 version is not ‘off the shelf’ suitable for exempted contracts, use by schools, light touch contracts, defence and security, utilities, concession contracts, works, mixed procurements, and purchasing under the Provider Selection Regime - although could be adapted by users for this use (c)As with the previous version, it continues to function as an English & Welsh law contract only (d)For any Public Contracts Regulations 2015 (‘PCR’) procurements in the time between publication of the contract and PA2023 ‘go live’ - the previous versions of the contract will still be available for use (e)The PCR version of the contract and accompanying guidance will be retired from go-live.
Core Terms: Definitions; What you must keep confidential; When you can share information	Updates to definition of Transparency Information to allow publication of various notices and information + when / when not to share information under the contract (e.g., ss50, 53, 69-71, 75, 80, 94, 99 PA 2023)	(a) Updating the definition of “Transparency Information” to refer to a) any information or notices, permitted or required by the PA2023, any Regulations published under it, and any PPNs, subject to any exemptions set out in s94 and  s99 PA2023) which shall be determined by the Buyer, taking into consideration any information which is Confidential Information; and b) any information about the Contract, including the content of the Contract, and any changes to this Contract agreed from time to time, as well as any information relating to the Deliverables and performance pursuant to the Contract required to be disclosed under FOIA or the Environmental Information Regulations 2004, subject to any exemptions, which shall be determined by the Buyer, taking into consideration any information which is Confidential Information (Cl. 1) (b)Reflecting the withdrawal of PPN 01/17 under PA2023, the reference to this PPN is removed from the definition of Transparency Information. See below in the PPNs section for other changes related to the withdrawal of this PPN. As PPN 09/21 has also been withdrawn, this is also removed from the definition of Transparency Information (Cl. 1); (c)Updating cl 15.6 to refer to “information” as “Information” is not a defined term (cl 15.6); (d) Updating cl 16.2.2 so it only refers to the Buyer being able to “comply with any of its obligations in relation to publishing Transparency Information.” (cl 16.2.2); (e) Adding in a clause stating that “Any such co-operation and/or information from the Supplier shall be provided at no additional cost.” (cl 16); (f)Amending the last sentence of cl 16 to state “However, the extent, content and format of the disclosure shall be decided by the Buyer, in its sole discretion.” (cl 16.4)
Core Terms: Ending the contract; Preventing fraud, bribery and corruption	Exclusions; removal of superseded fraud & bribery clauses	(a)Removing the termination right where the Buyer can terminate the Supplier if it discovers that the Supplier was in one of the situations in 57 (1) or 57(2) of the PCRs at the time the Contract was awarded (Cl. 11.4.1.4); (b)Removing the termination right where the Buyer can require termination of the Sub-contractor if it discovers that the Supplier was in one of the situations in 57 of the PCR at the time the Contract was awarded (Cl. 24.5.5); (c)Removing the termination right where the Buyer can terminate the Supplier if any of the events in 73(1) (a) or (b) of the PCR happens (Cl. 11.4.2). (d)Removing the ‘fraud and bribery’ drafting (Cl. 28).
Order Form; Core Terms:	Reflecting Prompt	Payment of Suppliers & notifying of invoicing errors
Pricing and payments; Record keeping and reporting; Other people’s rights in the contract; Supply Chain;	Payment / 30-day payment terms down supply chain, and invoicing (ss 68, 73, 88 PA 2023)	(a)Adding a clause into clause 5 stating that where any invoice does not conform to the Buyer’s requirements set out in clause [5.4], or the Buyer disputes the invoice, the Buyer shall notify the Supplier without undue delay (new clause 5.4); (b)Amending the reference to payment within 30 days in the Order Form, so it aligns with section 68 (imported by section 88) and refers to payment of valid and undisputed invoices being made within 30 days of receipt of invoice; or if later, by the date on which the payment falls due in accordance with the invoice, (Order Form – row 13 “Payment”); (c)Amending the clause providing that the Buyer will pay the supplier within 30 days, as required to reflect s 68 (imported by section 88).Amending this to state that the Buyer will make payment to the Supplier before the end of the period of thirty (30) days beginning with the day on which an invoice is received by the Buyer in respect of the sum; or if later, by the date on which the payment falls due in accordance with the invoice, subject to the invoice being verified by the Buyer as valid and undisputed (cl 5.3); Minimum required information in invoice: (d)Amending the clause stating that a supplier invoice is only valid if it includes particular information - to also refer to the minimum required information set out in section 88 PA2023 (Cl 5.4); Payment of Subcontractors: (e)Amending the requirement that the Supplier must ensure that all Subcontractors are paid, in full, within thirty (30) days of receipt of a valid, undisputed invoice, to reference and reflect the wording intended by s 73 and s 68 (imported by s 88) (cl. 5.7); Publication for non-compliance: (f)Adding a new clause to support the Buyer’s existing right to publish in the event of late/non-payment to the record keeping and reporting clauses requiring - at the end of each Contract year, at its own expense, the Supplier to provide a report to the Buyer setting out a summary of its compliance with the 30 day payment terms, such data to be certified by a director of the Supplier as being accurate and not misleading.’ (new clause in cl. 7); Payment of Subcontractors - mandatory terms: (g)Amending the mandatory provision to be included in subcontracts around Suppliers paying within 30 days to better reflect the wording intended by s 73 and s 68 - so that it is a term that requires all Subcontractors to be paid before the end of the period of thirty (30) days beginning with the day on which an invoice is received by the Supplier or other party in respect of the sum; or if later, by the date on which the payment falls due in accordance with the invoice,  subject to the invoice being verified by the party as valid and undisputed (cl 24.4.2.2); (h)Adding in a mandatory provision to be included in subcontracts requiring the party receiving goods or services under the contract to consider and verify invoices under that contract in a timely fashion and notify the Subcontractor without undue delay if it considers the invoice invalid or it disputes the invoice (new subclause cl 24.2.2); (i)Adding in a new clause stating that the Supplier must ensure that a term equivalent to the clauses above is included in each Sub-Contract in its supply chain, such that each Subcontractor is obliged to include those terms in any of its own Sub-Contracts in the supply chain for the delivery of this Contract. References to the “Supplier” and “Subcontractor”, are to be replaced with references to the respective Subcontractors who are parties to the relevant contract (new clause in cl 24); (j)Adding in a clause to CRTPA clauses, and amend the clause so that the ‘ban’ on use of this does not apply to the clauses above,allowing subcontractors to enforce these payment terms (cl 19).
Throughout the contract	Electronic Notices – primary method (s 96 PA 2023)	Updating the noticing provisions so that written notices will be served by email unless it is not practicable to do so, and ensuring that electronic (email) noticing is the prime method of serving notice.
Core Terms: Definitions used in the Contract; Ending the contract; Conflict of interest	Conflicts of Interest (‘COI’) updated (ss 81-83 PA 2023)	(a)Updating the definition of “Conflict of Interest” to better align with the language / definition of COI in PA2023. This refers to “a direct or indirect conflict between the financial, professional, or personal interests of the Supplier or the Supplier Staff and the duties owed to the Buyer under this Contract, in the reasonable opinion of the Buyer” (cl 1.1); (b)Removing the reference to the Supplier needing to ensure it and its staff are not placed in a perceived COI (so this only applies to actual or potential COIs) (cl. 33.1); (c)Updating the wording on steps to mitigate COIs and termination for actual or potential unresolvable COIs to better align with the language in PA2023 – “The Buyer will consider whether there are any reasonable steps that can be put in place to mitigate an actual, perceived or potential Conflict of Interest. If, in the reasonable opinion of the Buyer, such steps do not or will not resolve an actual or potential Conflict of Interest, the Buyer may terminate its Contract immediately by giving notice in writing to the Supplier where there is or may be an actual or potential Conflict of Interest…’ (cl. 33.3); (d)Where the Buyer terminates the contract because the Supplier is in an actual or potential COI that is not resolved, and the Supplier did not tell the Buyer about the COI, the Supplier will be responsible for costs of replacement deliverables for the term (cl 11.5.1); (e)Where the Buyer terminates the contract because the Supplier is in an actual or potential COI that is not resolvable/resolved, and the Supplier did tell the Buyer about the COI, where the COI could impact the contract’s performance or question its integrity, but cannot be avoided for reasons outside of the Supplier’s control, each party covers its own losses, and the Supplier will not be responsible for costs of replacement deliverables for the term (cl 11.5.2); (f)Where the Buyer terminates the contract because the Supplier is in an actual or potential COI that is not resolved, and the Supplier did tell the Buyer about the COI, where the COI could impact the contract’s performance or question its integrity, but the Supplier fails, or refuses, to take steps to avoid the COI, the Supplier will be responsible for costs of replacement deliverables for the term (11.5.1). Note, PPN 04/21: Applying Exclusions in Public Procurement, Managing Conflicts of Interest and Whistleblowing is withdrawn under PA2023, so any drafting on COIs from the PPN and accompanying guidance has been superseded by this PA2023 drafting. To the extent any drafting on exclusions was taken from this PPN and accompanying guidance this has been superseded by the PA2023 drafting on exclusions. We are keeping the drafting on whistleblowing in the contract.
Throughout the contract	Updates to PCR references	Where not otherwise captured in this table: (a)Updating references to the PCRs with references to the PA2023;- (b)Updating reference to PCR-related terms with PA2023 terms (e.g., replacing ‘selection questionnaire’ and ‘ITT’); (c)Updating references from “Contracts Finder” to “Find a Tender Service”.

2.2 PPN’s

General Contract Reference	Area	Change and Specific Contract Reference (previous v 1.4 specific references, v 1.5 may be slightly differently numbered)
New optional Security Annex 6	PPN 014:  Updates to the Cyber Essentials Scheme	In the new optional Security Annex: (a)Providing tick boxes for the Buyer to indicate whether it requires Suppliers to have Cyber Essentials or equivalent or Cyber Essentials Plus or equivalent; (b)Providing tick boxes for the Buyer to indicate whether it requires Subcontractors that Process Government Data to have Cyber Essentials or equivalent or Cyber Essentials Plus or equivalent; (c)Including a clause stating that where no option is selected, Suppliers and Subcontractors that Process Government Data are to have Cyber Essentials or equivalent; (d)Including a clause stating that Suppliers must ensure they and Subcontractors must have these in place before handing Government Data, and throughout the Term.
New optional Security Annex 6	PPN 012: Security Classifications Policy	In the new optional Security Annex: (a) Including a clause stating that Suppliers acknowledge they can only handle ‘official’ [which includes ‘official-sensitive’ although this is not noted in the clause] Government Data and not any higher classifications; (b)Including a clause stating that Suppliers can’t alter security classification and that if they become aware of handling ‘secret’ or ‘top secret’ data they need to immediately notify the Buyer and follow Buyer instructions; (c)Including a clause stating that the Supplier must ensure it, and its staff and subcontractors comply with the Expected Behaviours set out in para 16 of the Government Security Classification Policy and Security Controls (set out in para 12 of the Government Security Classification Policy) when handling Government Data.
Order Form; Core Terms: ‘Obeying the Law’	PPN 009: Tackling Modern Slavery in Government Supply Chains	Correcting the clauses to align with the example clauses from the guidance document accompanying this PPN. Updating the references / links to the PPN, and referencing complying with clauses (a)-(l) of Annex C of the guidance with the PPN (part 12 Order Form; clause 13.1.4 Core Terms - including footnote).
Core Terms: Definitions used in the Contract; Tax	PPN 08/15: tax arrangements of appointees (IR35) - withdrawn under PA2023; Updated clauses on tax reporting	Reflecting the withdrawal of PPN 08/15 under PA2023: (a)Updating the definition of Worker so that it no longer refers to PPN 08/15 (Cl 1); (b)Add definitions of IR35 and Supply Chain Intermediary which are needed as a result of updates to the core terms (Cl 1); (c)Update term requiring compliance with tax legislation to include National Insurance Contributions and IR35 provisions specifically (Cl. 31.2.1); (d)Add new clauses to enable the Buyer to gather information related to compliance with IR35 from the Supplier, provide this information to HMRC and an obligation to inform the Buyer if there is a change to the IR35 status of and Workers or Supplier Personnel (cl 31.3-31.6).
Throughout (No change - for information only)	PPN 008: Updated guidance on data protection legislation - withdrawn under PA2023	While this PPN has been withdrawn, we need to retain drafting on GDPR, so no changes have been proposed to the GDPR / data protection drafting, except as otherwise set out in here.
Core Terms: Definitions used in the Contract; What you must keep confidential; When you can share information	Procurement Policy Note 01/23: Requirements to publish on Contracts Finder - withdrawn under PA2023	Reflecting the withdrawal of PPN 01/23 under PA2023, the definition of Transparency Information is updated in line with PA2023 above (no further changes needed).

2.3 Security Annex & related security updates

General Contract Reference	Area	Change and Specific Contract Reference (previous v 1.4 specific references, v 1.5 may be slightly differently numbered)
Order Form; New optional Security Annex 6; Guidance	New optional Security Annex	(a)Creating a new optional Short Form Security Annex (Schedule) (new Annex 6, Order Form); (b)Adding guidance that if you have a particularly high-risk security project, or are buying consultancy or development services, you may want to consider adapting the other Mid-Tier Schedules for the Short Form (Order Form and Guidance document); (c)This incorporates PPN 014: Updates to the Cyber Essentials, and PPN 012: Security Classifications Policy, as set out above.
Order Form; Guidance	Updating Contract for new security Annex	(a)Adding in references to the new optional Security Annex; (b)Updating the Order Form to move all security requirements to one row, and allow for security requirements to be listed in the Order Form, and/or to refer to the optional Short Form Security Annex.
Core Terms: Data Protection and Security	System Requirements	(a)Amending the system requirements clause so that it refers to the Supplier system holding Government Data being a secure system that complies with the Security Requirements (including Annex 6 (Security) (if used)), or otherwise provided in writing by the Buyer (where any such requirements have been provided) (cl 14.3); (b)Moving this clause closer to the start of these security clauses (cl 14). See below for the definition of “Security Requirements” amendments.
Core Terms: What needs to be delivered	Compliance with Security Requirements	Amending the requirement that the Supplier must comply with any reasonable instructions, including the security requirements - so that this refers to the Security Requirements (cl 4.3.2). See below for the definition of “Security Requirements” amendments.
Core Terms: Definitions used in the Contract; New optional Security Annex 6; Guidance	Government Data Definition	Updating the definition of “Government Data” to: means any: (a)data, text, drawings, diagrams, images or sounds (together with any database made up of any of these) which are embodied in any electronic, magnetic, optical or tangible media; (b)Personal Data for which the Authority is a, or the, Data Controller; or (c)any meta‑data relating to categories of data referred to in Paragraphs (a) or (b); that is: (d)supplied to the Supplier by or on behalf of the Authority; or that the Supplier is required to generate, Process, Handle, store or transmit under this Contract (Cl.1).
Core Terms: Definitions used in the Contract; New optional Security Annex 6	Related Definitions for Security – elsewhere in the contract	(a)Adding a definition of “Security Requirements”. This refers to the security requirements set out in the Order Form or in the Security Annex (Annex 6) if used (Cl. 1.1); (b)In the Security Annex, a definition of “Subcontractor” is added in place of the usual definition in the contract, for the purpose of the specific security annex only; (c)In the Security Annex, a definition of “Supplier” is added in place of the usual definition in the contract, for the purpose of the specific security annex only. See also the amendments to the definition of “Process” / “Processing” below.
Core Terms: Data Protection & Security	Backups / Copies of Government Data	(a) Deleting the back-ups provision (cl 14.2); (b)Amending the providing Government Data clause so that it is subject to the Security Requirements (if any) (cl 14.7.1).
Core Terms: Data Protection & Security	Deletion / Erasure of Government Data	(a)Deleting the provision on destroying all storage media (cl 14.7.3); (b) (Subject to the Security Requirements) Amending the erasure provision so it refers to erasing (using a deletion method that ensures that even a determined expert using specialist techniques can recover only a small fraction of the data deleted) all Government Data or copies [the Supplier] or a Subcontractor holds…’ (cl 18.8.4); See also the changes on ‘carve out’ exceptions to these requirements, below.
Order Form; Core Terms: Definitions used in the Contract; Supplier Staff; Data Protection and Security	Staff Vetting	Amending the clauses relating to vetting of “Supplier Staff”: (a)Removing the definition of “Staff Vetting Procedures” (cl 1.1); (b)The sub-clause on vetting is moved into a new clause which provides that the Supplier shall ensure vetting takes place in accordance with Annex 6 (Security Management) (if used); or if Annex 6 is not used, the vetting requirements set out in the Order Form; and if Annex 16 is not used or there are no vetting requirements specified in the Order Form, Supplier Staff are to have BPSS or equivalent (cl 8.1.2; new cl 8); (c)Updating the ‘Policies and Procedures’ section on security / vetting in the Order Form to state that ‘For the purposes of vetting (i) Annex 6 will apply (if used); (ii) If Annex 6 is not used – the vetting requirements set out in this Order Form, which are: [Buyer to insert requirements, and whether this is to apply to all Supplier Staff (which includes Subcontractor staff), or only a limited subset of staff)]; (iii) If Annex 6 is not used and there are no vetting requirements specified in the Order Form, Supplier Staff are to have BPSS or equivalent (Order Form); (d)Adding in accompanying Guidance to the drafting in i): if you are not using a Security Annex (6) and you want Supplier /Subcontractor Staff, or some of these staff, to be subject to a specific type of vetting, you will need to list the requirements here. You will need to specify whether you want this to apply to all Supplier /Subcontractor Staff, or just a subset of these (see the specific definitions of “Subcontractor” and “Supplier Staff” in Annex 6 for an example of what these might be). If you are not using Annex 6 and do not want Supplier /Subcontractor Staff to be subject to vetting you should also specify that here – otherwise all Supplier Staff (which includes Subcontractor staff) will need to have BPSS or equivalent] (Order Form). (d)Amending the requirements that the Processor uses best endeavours to ensure the reliability and integrity of any Processor Personnel who have access to the Personal Data by referring to the Processor using the Staff Vetting Processes to achieve this (cl 14.9.4.3)
Core Terms: Data Protection & Security	Processor duties and security	(a)Amending the reference to processing Personal Data only in accordance with Clause 14 (Government Data and Security Requirements) as well as Part A of Annex 1 (cl 14.9.4.3(a)); (b)Amending the reference to complying with Processor’s duties to refer to the Security Annex (if used) as well as this cl 14 (para 14.9.4.3(i) of Annex 1); (c)Amending the requirements that the Processor give all reasonable assistance to the Controller in the preparation of any Data Protection Impact Assessment, which may include, at the discretion of the Controller - including intended measures to assess risks - by also requiring assurance that those measures comply with any security requirements specified in the Order Form (cl 14.9.3.4).
Throughout the Contract – e.g., Core Terms: Ending the contract; Data Protection & Security	Carving out certain Personal Data controlled/ owned by the Supplier from particular obligations	(a)Amending the requirement that the Supplier must promptly delete or return the Government Data, as the Buyer requires except where required to retain copies by Law - to carve out any Government Data which is Personal Data in respect of which the Supplier is a Controller, or the Supplier has rights to hold the Government Data independently of the Contract (cl 11.5.1.4); (b)Amending the requirements that the Supplier must erase all Government Data except where required to retain copies by Law - to carve out any Government Data which is Personal Data in respect of which the Supplier is a Controller, or the Supplier has rights to hold the Government Data independently of the Contract (cl 14.7.4). There may be other instances in the contract where these changes will have also taken place. Where appropriate, we have tried to exempt from deletion / erasure - data that the Supplier must legally retain, or otherwise has rights to.
Core Terms: Definitions used in the Contract; Annex 1	Protective Measures	(a)Amending the definition of “Protective Measures” so that it refers to those measures in Annex 1 and Annex 6 (new Security Schedule) if used (cl 1.1). (b)Amending the processing Personal Data table in the data protection Schedules/Annexes, noting that any Protective Measures are to be in accordance with any Security Requirements specified in the Order Form (table in Part A of Annex 1).

2.4 Updates in Law - Data Protection / GDPR

General Contract Reference	Area	Change and Specific Contract Reference (previous v 1.4 specific references, v 1.5 may be slightly differently numbered)
Core Terms: Data Protection & Security; Annex 1	GDPR - UK-US Data Bridge (partial adequacy)	(a)Adding sub-clauses in relation to transfers of Personal Data outside of the UK and/or EEA requiring that, before any Personal Data can be transferred to any US-based Suppliers (and any relevant US-based subcontractors), and the US Data Privacy Framework is being relied on, they must be self-certified and continue to be self-certified on the US Data Privacy Framework, and notify Buyers immediately if there are any, or there are reasonable grounds to believe there may be any, changes in respect of the position on the US Data Privacy Framework (for example if that entity ceases to be certified or is at risk of being so, or there is a strong likelihood of a competent court finding the US Data Privacy Framework unlawful), and the Supplier must then take all appropriate steps to remedy the certification and/or put in place alternative data transfer mechanisms (Cl 14.7.4.3(c)(i); para 2.1.10.1 of Part B of Annex 1); (b)Adding a specific termination right to ensure that Buyers can terminate the contract where US-based Suppliers and Subcontractors are no longer self-certified on the Framework / the Framework is no longer available and the Supplier does not put in place alternative data transfer mechanisms in place or do not inform the Buyer of any changes to their certification status on the Framework. Where terminating on this ground, the Buyer pays any outstanding charges, nothing further (Cl 14.7.4.3(c)(i)(C); para 2.1.10.1(c) of Part B of Annex 1).
Core Terms: Definitions used in the Contract; Data Protection & Security	Process/ Processing definitions - alignment	Adding the definition of Process to cl 1 (definitions) rather than in cl 14.9.1.
Annex 1	Joint Controller Agreements (‘JCA’) - cover other regulatory authorities as well as ICO	In the JCA (aside from where there is a specific reference to the Information Commissioner/ICO in the context of transfers (e.g., to the IDATA)), where the Information Commissioner/ICO is referenced, also referencing “any other regulatory authority” (para 3.1.2.1, 3.1.2.4 & throughout para 7 of Part B, Annex 1)

2.5 Miscellaneous other updates (substantive)

General Contract Reference	Area	Change and Specific Contract Reference (previous v 1.4 specific references, v 1.5 may be slightly differently numbered)
Core Terms: Definitions used in the Contract	Supplier Personnel / Supplier Staff definition	Updating the definition of “Supplier Staff” as follows: “means any individual engaged, directly or indirectly, or employed by the Supplier or any Sub-contractor, in the management or performance of the Supplier’s obligations under this Contract” (cl 1.1)
Core Terms: Understanding the Contract	Documents as varied incorporated	Adding a new clause on interpretation of the contract stating that “a reference to a document (including this Contract) is to that document as varied, amended, novated, ratified or replaced from time to time” (new cl. 2.1.7)
Core Terms: Supply Chain; Ending the Contract	Buyer termination for breaches of equality law in delivering contract - removal	Removing the reference to ‘equality’ law in the rights for the Buyer to terminate the contract, or require termination of subcontracts, or the mandatory terms in subcontracts - where ‘the Supplier fails to comply with its legal obligations in the fields of environmental, social, equality or employment Law when providing the Deliverables’ (cl 11.4.1.6; cl 24.4.2.1; cl 24.5.4).
Core Terms: Data Protection & Security	Aligning approach to corrupted, lost, degraded Government Data	(a)Making clearer that the clause requiring restoration of Government Data at the Supplier’s expense (or at Buyer’s reasonable expense to be repaid by the Supplier) are in case of Supplier Default, and apply in each case of a) corrupted, b) lost, or c) degraded Government Data (cl 14.5); (b)Removing clause 14.6 in light of the above change (cl 14.6).
Core Terms: Definitions used in the Contract	Definition of the term Law	Amending the clause about how to interpret the reference to a Law, so it states: “a reference to a Law includes a reference to that Law as modified, amended, extended, consolidated, replaced or re-enacted (including as consequence of the Retained EU Law (Revocation and Reform) Act 2023) from time to time before or after the date of this Contract and any prior or subsequent legislation under it (cl 1.1)
Core Terms: How much you can be held responsible for	Data Protection liability limit - correcting cross references & aligning language	Amending clause 12.6 to say: ‘In spite of Clause 12.1, but subject to Clauses 12.2 and 12.3, the Supplier’s total aggregate liability in each Contract Year under Clause 14.7.5 is no more than the Data Protection Liability Cap.’ Replacing the reference from “Notwithstanding” with “In spite of” and replacing the second reference to cl 12.1 to cl 12.2 (cl 12.6).

2.6 Minor / Clarificatory Changes / Amendments Resulting from Other Changes

General Contract Reference	Area	Change and Specific Contract Reference (previous v 1.4 specific references, v 1.5 may be slightly differently numbered)
Core Terms: Dealing with Claims	Reference to Beneficiary/ Indemnifier - typo	Replacing the reference to “Beneficiary” with “Indemnifier” in “The Beneficiary must” (cl 27.3).
Core Terms: Data Protection & Security	Data Protection - Supplier Indemnity - making separate clause	Making the Supplier indemnity for breaches of clause 14 or any Data Protection Legislation a separate clause, rather than a subclause (cl 14.7.5).
Core Terms: Ending the Contract	Consequences of termination – fixing cross reference	Replacing the reference to clause 10.9 with clause 10.7.3 in clause 11.5.1 (cl. 11.5.1).
Core Terms: Understanding the Contract	Reference to Act year	Updating the reference to the Retained EU Law (Revocation and Reform) Act so it refers to the year of the Act - 2023 (cl 1.3.3).
Throughout the Contract – e.g., Core Terms: Definitions used in the Contract	Definitions	Where not already mentioned elsewhere in the table, amending the definitions as required, to reflect all of these changes (cl 1.1 & throughout)
Throughout the Contract	Cross-references	Where not already mentioned elsewhere in the table, amending all cross-references as required, to reflect all of these changes.
Throughout the Contract	Guidance	Where not already mentioned elsewhere in the table, amending the guidance in the contract, to reflect all of these changes.
Throughout the Contract	Typos	Where not already mentioned elsewhere in the table, fixing typos in the contract.