Safeguarding Customer Information The Servicer has implemented and will maintain security measures designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information published in final form on February 1, 2001, 66 Fed. Reg. 8616 and the rules promulgated thereunder, as amended from time to time (the “Guidelines”). The Servicer shall promptly provide the Master Servicer, the Trustee and the NIMS Insurer information reasonably available to it regarding such security measures upon the reasonable request of the Master Servicer, the Trustee and the NIMS Insurer which information shall include, but not be limited to, any Statement on Auditing Standards (SAS) No. 70 report covering the Servicer’s operations, and any other audit reports, summaries of test results or equivalent measures taken by the Servicer with respect to its security measures to the extent reasonably necessary in order for the Seller to satisfy its obligations under the Guidelines.
Security and Safeguarding Information (a) Confidential Information that contains Non-Public Personal Information about customers is subject to the protections created by the Xxxxx-Xxxxx-Xxxxxx Act of 1999 (the “Act”) and under the standards for safeguarding Confidential Information, 16 CFR Part 314 (2002) adopted by Federal Trade Commission (“FTC”) (the “Safeguards Rule”). Additionally, state specific laws may regulate how certain confidential or personal information is safeguarded. The parties agree with respect to the Non-Public Personal Information to take all appropriate measures in accordance with the Act, and any state specific laws, as are necessary to protect the security of the Non-Public Personal Information and to specifically assure there is no disclosure of the Non-Public Personal Information other than as authorized under the Act, and any state specific laws, and this Agreement. With respect to Confidential Information, including Non-Public Personal Information and Personally Identifiable Financial Information as applicable, each of the parties agrees that:
Compliance with Safeguarding Customer Information Requirements The Servicer has implemented and will maintain security measures designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information published in final form on February 1, 2001, 66 Fed. Reg. 8616, and the rules promulgated thereunder, as amended from time to time (the “Guidelines”). The Servicer shall promptly provide the Seller information regarding the implementation of such security measures upon the reasonable request of the Seller.
Environment, Health, and Safety (i) The Seller, and its predecessors and Affiliates has complied with all Environmental, Health, and Safety Laws, and no action, suit, proceeding, hearing, investigation, charge, complaint, claim, demand, or notice has been filed or commenced against any of them alleging any failure so to comply. Without limiting the generality of the preceding sentence, each of the Seller, and its predecessors and Affiliates has obtained and been in compliance with all of the terms and conditions of all permits, licenses, and other authorizations which are required under, and has complied with all other limitations, restrictions, conditions, standards, prohibitions, requirements, obligations, schedules, and timetables which are contained in, all Environmental, Health, and Safety Laws.
Regulation RR Risk Retention Ford Credit, as Sponsor, and the Depositor agree that (i) Ford Credit will cause the Depositor to, and the Depositor will, retain the Residual Interest on the Closing Date and (ii) Ford Credit will not permit the Depositor to, and the Depositor will not, sell, transfer, finance or hedge the Residual Interest except as permitted by Regulation RR.
Safeguards To the extent the Asset Representations Reviewer receives Personally Identifiable Information in the performance of services under this Agreement, the Asset Representations Reviewer represents and warrants that it has, and will continue to have adequate administrative, technical, and physical safeguards: (i) to ensure the security and confidentiality of Personally Identifiable Information; (ii) to protect against any anticipated threats or hazards to the security or integrity of Personally Identifiable Information; and (iii) to protect against unauthorized acquisition of, access to or use of Personally Identifiable Information which could result in a “breach” as that term is defined under applicable Privacy Laws.
Procurement Licensee shall procure the Licensed Product only from an Authorized Source.
Customer Information The Dealer Manager will use commercially reasonable efforts to provide the Company with any and all subscriber information that the Company requests in order for the Company to comply with the requirements under Section 5(l) above.
Know Your Customer Information Upon a merger or consolidation pursuant to Section 7.3(b), the Borrower or the surviving corporation into which the Borrower is merged or consolidated shall deliver for the benefit of the Lenders and the Administrative Agent, such other documents as may reasonably be requested in connection with such merger or consolidation, including, without limitation, information in respect of “know your customer” and similar requirements, an incumbency certificate and an opinion of nationally recognized independent counsel, or other independent counsel reasonably satisfactory to the Majority Lenders, to the effect that all agreements or instruments effecting the assumption of the Obligations of the Borrower under the Notes, this Agreement and the other Loan Documents pursuant to the terms of Section 7.3(b) are enforceable in accordance with their terms and comply with the terms hereof.
Privacy and Data Protection The Company and its subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance in all material respects with such policies and procedures. The Company and its subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the General Disclosure Package and the Prospectus. The Company and its subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its subsidiaries. The Company and its subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not, individually or in the aggregate, be material to the Company or any of its subsidiaries; and there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.
