Yes the provisions related to data protection can be added in the MOU. However, the provisions related to data protection must be as per the requirements of the Personal Data Protection Act.