Art. 30 III e) ii) requires undertakings to agree the right on alternative assurance levels if other clients’ rights are affected. It is unclear how to include this in the contractual agreement. Does this mean e.g. third party audits can be sufficient?