9.3 Anti-Doping Organizations sharing Personal Information with Third-Party Agents  in connection with their Anti -Doping Activities  shall ensure that such Third-Party Agents  are subject to appropriate controls, including contractual and technical controls, in order to protect the confidentiality and privacy of the Personal Information and to ensure that the Personal Information  is only Processed  on behalf of the Anti-Doping Organization or within the scope of the delegation or engagement of such Third- Party Agent , as the case may be.