(whether in an ‘opt-in’ or an ‘opt-out’ form), which the Cloud Customer shall remain free to withdraw at any time in the future. 3.4.4 CSPs shall grant Cloud Customers the right and the technical capability to access, verify, correct or delete their Customer Data. 3.4.5 The CSPs’ obligations under Article ‎3.4.4, above, shall be without prejudice to the CSPs’ right to the Customer Data mentioned in Article ‎2.2.15.3, above, if and for as long as this is necessary 3.4.5.1 for the purposes of billing that Cloud Customer or 3.4.5.2 in order to meet the CSP’s obligations under any applicable laws. 3.4.6 The provisions of this Article ‎3.4 shall be without prejudice to any applicable legal, regulatory or contractual provision conferring a higher degree of protection, and associated rights and obligations, with regard to any categories of personal or business data that form part of Customer Data or Customer Content covered by this Regulatory Framework. 3.5 Unlawful Content and Infringing Content 3.5.1 The provisions of this Article 3 ‎ .5 shall be binding upon CSPs who: 3.5.1.1 conclude a Cloud Contract with a Cloud Customer, as well as 3.5.1.2 those who, although not a party to such a Cloud Contract with the Cloud Customer concerned, alone or jointly with others exercise control over the processing of the relevant Customer Content. 3.5.2 Subject to the provisions of this Article ‎3.5, a CSP shall not incur any administrative or criminal liability under this Regulatory Framework or any law, regulation, resolution, or instruction, including the Anti-Cyber Crime Law, based only on the fact that Unlawful Content or Infringing Content has been uploaded, processed or stored on the CSP’s Cloud System. 3.5.3 Nothing in this Regulatory Framework shall be interpreted as a legal obligation for CSPs to monitor their Cloud System for Unlawful Content or Infringing Content. 3.5.4 If the Commission or any other authorized entity in the Kingdom orders in writing the CSP to remove any Unlawful Content or Infringing Content from a Datacenter or other element of a Cloud System located in the Kingdom that is used or relied on by the CSP for the provision of Cloud Services under the scope or Articles ‎3.1.1 or ‎3.1.2, above, the CSP shall be responsible for ensuring that such Unlawful Content or Infringing Content is: Cloud Computing Regulatory Framework Page 9 of 15