Protection of Customer Data The Supplier shall not delete or remove any proprietary notices contained within or relating to the Customer Data. The Supplier shall not store, copy, disclose, or use the Customer Data except as necessary for the performance by the Supplier of its obligations under this Call Off Contract or as otherwise Approved by the Customer. To the extent that the Customer Data is held and/or Processed by the Supplier, the Supplier shall supply that Customer Data to the Customer as requested by the Customer and in the format (if any) specified by the Customer in the Call Off Order Form and, in any event, as specified by the Customer from time to time in writing. The Supplier shall take responsibility for preserving the integrity of Customer Data and preventing the corruption or loss of Customer Data. The Supplier shall perform secure back-ups of all Customer Data and shall ensure that up-to-date back-ups are stored off-site at an Approved location in accordance with any BCDR Plan or otherwise. The Supplier shall ensure that such back-ups are available to the Customer (or to such other person as the Customer may direct) at all times upon request and are delivered to the Customer at no less than six (6) Monthly intervals (or such other intervals as may be agreed in writing between the Parties). The Supplier shall ensure that any system on which the Supplier holds any Customer Data, including back-up data, is a secure system that complies with the Security Policy and the Security Management Plan (if any). If at any time the Supplier suspects or has reason to believe that the Customer Data is corrupted, lost or sufficiently degraded in any way for any reason, then the Supplier shall notify the Customer immediately and inform the Customer of the remedial action the Supplier proposes to take. If the Customer Data is corrupted, lost or sufficiently degraded as a result of a Default so as to be unusable, the Supplier may: require the Supplier (at the Supplier's expense) to restore or procure the restoration of Customer Data to the extent and in accordance with the requirements specified in Call Off Schedule 8 (Business Continuity and Disaster Recovery) or as otherwise required by the Customer, and the Supplier shall do so as soon as practicable but not later than five (5) Working Days from the date of receipt of the Customer’s notice; and/or itself restore or procure the restoration of Customer Data, and shall be repaid by the Supplier any reasonable expenses incurred in doing so to the extent and in accordance with the requirements specified in Call Off Schedule 8 (Business Continuity and Disaster Recovery) or as otherwise required by the Customer.
Third-Party Information; Privacy or Data Protection Laws Each Party acknowledges that it and its respective Subsidiaries may presently have and, after the Effective Time, may gain access to or possession of confidential or proprietary Information of, or personal Information relating to, Third Parties: (i) that was received under confidentiality or non-disclosure agreements entered into between such Third Parties, on the one hand, and the other Party or the other Party’s Subsidiaries, on the other hand, prior to the Effective Time or (ii) that, as between the two parties, was originally collected by the other Party or the other Party’s Subsidiaries and that may be subject to and protected by privacy, data protection or other applicable Laws. Each Party agrees that it shall hold, protect and use, and shall cause its Subsidiaries and its and their respective Representatives to hold, protect and use, in strict confidence the confidential and proprietary Information of, or personal Information relating to, Third Parties in accordance with privacy, data protection or other applicable Laws and the terms of any agreements that were either entered into before the Effective Time or affirmative commitments or representations that were made before the Effective Time by, between or among the other Party or the other Party’s Subsidiaries, on the one hand, and such Third Parties, on the other hand.
Information and Reporting The Adviser shall provide the Trust and its respective officers with such periodic reports concerning the obligations the Adviser has assumed under this Agreement as the Trust may from time to time reasonably request.
Access and Reports Subject to applicable Law, upon reasonable notice, (a) the Company shall (and shall cause its Subsidiaries to) afford Parent and Parent’s Representatives reasonable access, during normal business hours throughout the period prior to the Effective Time, to its employees, properties, books, Contracts and records and, during such period, shall (and shall cause its Subsidiaries to) furnish promptly to Parent all information concerning its business, properties and personnel as may reasonably be requested and (b) Parent shall (and shall cause its Subsidiaries to) afford the Company reasonable access, during normal business hours throughout the period prior to the Effective Time, to such information as may be reasonably requested by the Company for a bona fide business purpose in connection with material events, circumstances, occurrences or developments with respect to Parent and its Subsidiaries after the date of this Agreement (or which were not previously disclosed to the Company by Parent or its Representatives and were not known by the Company, in each case, as of the date of this Agreement); provided that (i) neither the Company nor Parent shall be required to provide such access if it would unreasonably disrupt its operations and (ii) no investigation pursuant to this Section 6.7 shall affect or be deemed to modify any representation or warranty made by the Company, Parent, or Merger Sub herein, and provided, further, that the foregoing shall not require the Company, Parent or any of their respective Subsidiaries (1) to permit any inspection, or to disclose any information, that in the reasonable judgment of the Company or Parent, as applicable, would result in the disclosure of any Trade Secrets of third parties or violate any of its obligations with respect to confidentiality (provided that such Party shall have used reasonable best efforts to obtain the consent of such third party to such inspection or disclosure), (ii) to permit (or to require the Company to perform) any Phase II environmental site assessments or other intrusive environmental sampling or subsurface investigations, including soil, sediment or groundwater testing or sampling, on any of the properties owned, leased or operated by it or any of its Subsidiaries or (iii) to disclose any privileged information of the Company, Parent or any of their respective Subsidiaries. Notwithstanding anything in this Section 6.7 to the contrary, the Company and Parent shall use their respective commercially reasonable efforts to obtain any consents of third parties that are necessary to permit such access or make such disclosure and shall otherwise use commercially reasonable efforts to permit such access or disclosure, including pursuant to the use of “clean team” arrangements (on terms reasonably acceptable to the Company and Parent, as applicable) pursuant to which outside counsel of Parent or the Company, as applicable, could be provided access to any such information and pursuant to which such information shall not be disclosed by such outside counsel to directors, officers, employees or other Representatives of Parent or the Company, as applicable, without the prior consent of the other Party; provided that neither the Company nor Parent, as applicable, shall be required to incur any liability, take any action that would breach any Contract or applicable Law or otherwise jeopardize any privilege or protection in connection with the foregoing. All requests for information made pursuant to this Section 6.7 shall be directed to the general counsel or other Person designated by the Company or Parent, as applicable. All such information shall be governed by the terms of the Confidentiality Agreement.
Data Protection and Privacy:
Protected Health Information Party shall maintain the privacy and security of all individually identifiable health information acquired by or provided to it as a part of the performance of this Agreement. Party shall follow federal and state law relating to privacy and security of individually identifiable health information as applicable, including the Health Insurance Portability and Accountability Act (HIPAA) and its federal regulations.
Access to Information Systems Access, if any, to DXC’s Information Systems is granted solely to perform the Services under this Order, and is limited to those specific DXC Information Systems, time periods and personnel as are separately agreed to by DXC and Supplier from time to time. DXC may require Supplier’s employees, subcontractors or agents to sign individual agreements prior to access to DXC’s Information Systems. Use of DXC Information Systems during other time periods or by individuals not authorized by DXC is expressly prohibited. Access is subject to DXC business control and information protection policies, standards and guidelines as may be modified from time to time. Use of any other DXC Information Systems is expressly prohibited. This prohibition applies even when an DXC Information System that Supplier is authorized to access, serves as a gateway to other Information Systems outside Supplier’s scope of authorization. Supplier agrees to access Information Systems only from specific locations approved for access by DXC. For access outside of DXC premises, DXC will designate the specific network connections to be used to access Information Systems.
Removal of Data County PHI or PI must not be removed from the premises of the Contractor except with express written permission of County.
Applicability of Data Privacy Protections In the event that Personal Information will be Processed by Supplier in connection with the performance under this Agreement (including any SOW), then and only then shall the provisions of this Section ‘Data Protection and Privacy’ be applicable. For the avoidance of doubt, the data security requirements contained in section ‘Information Security’ shall apply regardless of whether Personal Information is Processed under this Agreement or any SOW. All Personal Information obtained from or on behalf of DXC or in connection with performance pursuant to this Agreement shall be Processed and protected pursuant to this Section ‘Data Protection and Privacy’, the Section ‘Information Security’ and any other Sections of this Agreement that address Personal Information.
Accessibility of Information Technology Contractor represents and warrants that any software/ hardware/ communications system/ equipment (collectively “technology”), if any, provided under this Agreement adheres to the standards and/or specifications as may be set forth in the Section 508 of the Rehabilitation Act of 1973 standards guide and is fully compliant with WCAG 2.0 AA standards for accessibility and compliant with any applicable FCC regulations. Technology that will be used on a mobile device must also be navigable with Voiceover on iOS devices in addition to meeting WCAG 2.0 level AA. If portions of the technology or user experience are alleged to be non-compliant or non- accessible at any point, District will provide Contractor with notice of such allegation and Contractor shall use its best efforts to make the technology compliant and accessible. If a state or federal department, office or regulatory agency, or if any other third party administrative agency or organization (“Claimants”), make a claim, allegation, initiates legal or regulatory process, or if a court finds or otherwise determines that technology is non-compliant or non-accessible, Contractor shall indemnify, defend and hold harmless the District from and against any and all such claims, allegations, liabilities, damages, penalties, fees, costs (including but not limited to reasonable attorneys’ fees), arising out of or related to Xxxxxxxxx’ claims. Contractor shall also fully indemnify District for the full cost of any user accommodation that is found to be necessary due to an identifiable lack of accessibility in the Contractor’s technology. If necessary, an independent 3rd party accessibility firm using POUR standards (Perceivable, Operable, Understandable and Robust) may be used to validate the accessibility of the technology.
Protection of Personal Information Party agrees to comply with all applicable state and federal statutes to assure protection and security of personal information, or of any personally identifiable information (PII), including the Security Breach Notice Act, 9 V.S.A. § 2435, the Social Security Number Protection Act, 9 V.S.A. § 2440, the Document Safe Destruction Act, 9 V.S.A. § 2445 and 45 CFR 155.260. As used here, PII shall include any information, in any medium, including electronic, which can be used to distinguish or trace an individual’s identity, such as his/her name, social security number, biometric records, etc., either alone or when combined with any other personal or identifiable information that is linked or linkable to a specific person, such as date and place or birth, mother’s maiden name, etc.
