"Sensitive Personal Data"
Is that defined anywhere? I can understand the use of data identifying who travelled, when they travelled and where they travelled, and wouldn't object to that being shared. What other data do they need that can be classified as 'sensitive'?
The agreements seem to be about ensuring that data that shouldn't have been shared in the first place is handled sensitively. How about keeping it simple: confine it to necessary data and remove the retention controls (that we know will be ignored anyway)?