In addition, the Protection of Privacy Regulations (Data Security) 5777-2017 states that, in the event of a contract of a database owner with an outside entity for the purpose of receiving a service, a number of provisions must be stipulated in the agreement, including: the data that the outside entity may process and the purposes of the use permitted in the contract; the manner of implementation of data security obligations the holder has; the contract term; and the return of the data to the owner at the end of the contract.