Confidentiality and Publicity 26.1 All proprietary or confidential information (“Proprietary Information”) disclosed by either Party during the negotiations and the term of this Agreement will be protected by both Parties in accordance with the terms provided herein.
26.2 As used in this Agreement, the term “Proprietary Information” will mean written, recorded, machine readable or other information provided in tangible form to one Party by the other Party regarding the above referenced subject matter and which is marked proprietary or confidential with the appropriate owner corporation name, e.g., “Frontier Proprietary”. Information disclosed orally will not be considered proprietary unless such information is reduced to writing by the disclosing Party and a copy is delivered to the other Party within thirty (30) business days after such oral disclosure. The writing will also state the place, date and person(s) to whom disclosure was made.
26.3 Each Party agrees that it will not disclose any Proprietary Information of the other Party in whole or in part, including derivations, to any third party for a period of three (3) years from the date of disclosure unless the Parties agree to modify this Agreement to provide for a different nondisclosure period for specific materials. Neither Party will be liable for inadvertent or accidental disclosure of Proprietary Information of the other Party provided that:
26.3.1 each Party uses at least the same degree of care in safeguarding such Proprietary Information as it uses for its own proprietary information of like importance, and such degree of care will be reasonably calculated to prevent such inadvertent disclosure;
26.3.2 it limits access to such Proprietary Information to its employees and agents who are directly involved in the consideration of the Proprietary Information and informs its employees and agents who have access to such Proprietary Information of its duty not to disclose; and
26.3.3 upon discovery of any such inadvertent disclosure of Proprietary Information, it will endeavor to prevent any further inadvertent disclosure.
26.4 Information will not be deemed proprietary and the receiving Party will have no obligation with respect to any such information which:
26.4.1 is or becomes publicly known through no wrongful act, fault or negligence of the receiving Party; or
26.4.2 was known by the receiving Party or by any other affiliate or subsidiary of the receiving Party prior to disclosure, or is at any time developed by the receiving Party independently of any such disclosure; or
26.4.3 was disclosed to the receiving Party by a third party who was free of obligations of confidentiality to the disclosing Party; or
26.4.4 is disclosed or used by the receiving Party, not less than three (3) years following its initial disclosure or such other nondisclosure period as may be agreed in writing by the Parties; or
26.4.5 is approved for release by written authorization of the disclosing Party; or
26.4.6 is disclosed pursuant to a requirement or request of a governmental agency or disclosure is required by operation of law; or
26.4.7 is furnished to a third party by the disclosing Party without a similar restriction on the third party’s rights.
26.5 Since either Party may choose not to use or announce any services, products or marketing techniques relating to these discussions or information gained or exchanged during the discussions, both Parties acknowledge that one is not responsible or liable for any business decisions made by the other in reliance upon any disclosures made during any meeting between the Parties or in reliance on any results of the discussions. The furnishing of Proprietary Information to one Party by the other Party will not obligate either Party to enter into any further agreement or negotiation with the other.
26.6 Nothing contained in this Agreement will be construed as granting to one Party a license, either express or implied, under any patent, copyright, or trademark, now or hereafter owned, obtained, controlled, or which is or may be licensable by the other Party.
26.7 All publicity regarding this Agreement and its Attachments is subject to the Parties’ prior written consent.
26.8 Unless otherwise agreed upon, neither Party will publish or use the other Party’s name, language, pictures, or symbols from which the other Party’s name may be reasonably inferred or implied in any advertising, promotion, or any other publicity matter relating directly or indirectly to this Agreement.
Confidentiality and Publication 7.1 Except as provided herein, each party shall maintain in confidence during the term of this Agreement and for seven (7) years thereafter, and shall not use for any [*] Certain information on this page has been omitted and filed separately with the Commission. Confidential treatment has been requested with respect to the omitted portions. purpose or disclose to any third party, any Technology or other information disclosed by the other party in writing and marked "Confidential" or that is disclosed orally and confirmed in writing as confidential within forty-five (45) days following such disclosure (collectively, 'CONFIDENTIAL INFORMATION'), except to the extent that any such Confidential Information -
(a) is at the time of being so provided or after that time through no fault of the party to whom it was so provided becomes public knowledge; or
(b) was lawfully available on a non-confidential basis to the party to whom it was so provided before that time; or
(c) can be shown by the party to whom it was so provided to have been independently produced by that party without any use of such confidential information provided to it by the other party; or
(d) is made available to the party to whom it was so provided otherwise than in breach of an obligation of confidentiality owed to the other party.
7.2 The results of the Project may be made public by either party (or, in the case of ICRT, by ICRF) except to the extent that -
(a) publication would include any Confidential Information of the other party; or
(b) publication would prejudice the obtaining of patent protection for an invention constituting Project Technology, or the commercial exploitation of any unpatented or unpatentable Project Technology which remains unpublished.
7.3 To allow time for review of any proposed disclosure of any subject matter which may be precluded from being made public under clause 7.2, each of ICRT and Introgen shall provide to the other -
(a) a copy of any manuscript disclosing any results of the Project not less than 45 days notice before submitting the manuscript for publication; and
(b) a copy of any slides to be used in an oral presentation disclosing any results of the Project together with an outline of the presentation not less than 20 working days before making any such oral presentation.
7.4 The party receiving any such material pursuant to clause 7.3 shall promptly and in any event prior to the proposed date of submission for publication review the proposed disclosure and notify the other party in writing of its conclusions, failing which the other party shall be free to make the proposed disclosure.
7.5 If in the reasonable opinion of the party receiving the material the proposed disclosure does not include subject matter which is precluded from being made public under clause 7.2, it shall promptly notify the other party which shall thereupon be free to make the proposed disclosure.
7.6 If in the reasonable opinion of either party -
(a) the proposed disclosure includes subject matter which is precluded from being made public under clause 7.2 and which is patentable, neither party shall publish or otherwise disclose the material in question for a period of three months from the date on which the relevant material was received by the party in question and, if a patent application is made within that period of three months, for a further period as agreed but in any event not exceeding a total of 18 months from that date (including such period of three months), following which the other party shall be free to make the proposed disclosure; or
(b) the proposed disclosure includes unpatented (or unpatentable) Project Technology which that party wishes to maintain as unpublished and which
(c) the proposed disclosure includes Confidential Information of the reviewing party, the disclosing party shall remove such Confidential Information prior to such disclosure.
7.7 Notwithstanding the foregoing provisions of this clause 7 above, the receiving party may use or disclose Confidential Information of the disclosing party
(a) to the extent necessary to exercise its rights hereunder (including providing such information to bona fide licensees or prospective licensees as contemplated by this Agreement or otherwise and to potential investors or partners on reasonable terms of confidentiality) or to fulfil its obligations and/or duties hereunder;
(b) in filing for, prosecuting or maintaining any proprietary rights, prosecuting or defending litigation; and
(c) in complying with applicable governmental regulations and/or submitting information to tax or other governmental authorities; or as otherwise required by law; provided that if the receiving party is required by law to make any public disclosures of Confidential Information of the disclosing party then, to the extent it may legally do so, it shall give reasonable advance notice to the disclosing party of such disclosure and shall use its reasonable efforts to secure confidential treatment of
Confidentiality and Proprietary Rights Executive agrees to read, sign and abide by Company’s Employee Innovations and Proprietary Rights Assignment Agreement, which is provided with this Agreement and incorporated herein by reference.
CONFIDENTIALITY AND LOYALTY The Executive acknowledges that heretofore or hereafter during the course of his employment he has produced and received, and may hereafter produce, receive and otherwise have access to various materials, records, data, trade secrets and information not generally available to the public (collectively, "Confidential Information") regarding the Employer and its subsidiaries and affiliates. Accordingly, during and subsequent to termination of this Agreement, the Executive shall hold in confidence and not directly or indirectly disclose, use, copy or make lists of any such Confidential Information, except to the extent that such information is or thereafter becomes lawfully available from public sources, or such disclosure is authorized in writing by the Employer, required by law or by any competent administrative agency or judicial authority, or otherwise as reasonably necessary or appropriate in connection with the performance by the Executive of his duties hereunder. All records, files, documents, computer diskettes, computer programs and other computer-generated material, as well as all other materials or copies thereof relating to the Employer's business, which the Executive shall prepare or use, shall be and remain the sole property of the Employer, shall not be removed from the Employer's premises without its written consent, and shall be promptly returned to the Employer upon termination of the Executive's employment hereunder. The Executive agrees to abide by the Employer's reasonable policies, as in effect from time to time, respecting confidentiality and the avoidance of interests conflicting with those of the Employer.
Confidentiality and Use of Information a) Contractor shall hold in trust for the District, and shall not disclose to any person, any confidential information. Confidential information is information which is related to the District’s research, development, trade secrets and business affairs; but does not include information which is generally known or easily ascertainable by nonparties through available public documentation.
b) Contractor shall advise the District of any and all materials used, or recommended for use by Contractor to achieve the project goals, that are subject to any copyright restrictions or requirements. In the event Contractor shall fail to so advise the District and as a result of the use of any programs or materials developed by Contractor under this Contract the District should be found in violation of any copyright restrictions or requirements, or the District should be alleged to be in violation of any copyright restrictions or requirements, Contractor agrees to indemnify, defend and hold harmless, District against any action or claim brought by the copyright holder.
c) Notwithstanding the above requirements, to the extent any records or documents associated with the Contractor’s services and/or the project are or become public records, they shall be subject to disclosure pursuant to the Public Records Act and applicable California law.
Confidentiality and Data Protection We are a data controller for the information you provide to us including individual, identification and financial details, policy history and special category data (such as medical or criminal history). Details of our legal basis for processing your information, along with details of any third party recipient whom it may be necessary to share your personal data with in order to fulfil the contract, retention period for data held, security of your data, your rights under the UK General Data Protection Regulations (UK GDPR) including the right to complain can be found in our full ‘Privacy Notice’ attached to these terms of business and/or on our website at xxx.xxxxxxxxxxxxxxxx.xx.xx.
Confidentiality; Publicity (a) Acquiror acknowledges that the information being provided to it in connection with this Agreement and the consummation of the Transactions is subject to the terms of the Company Confidentiality Agreement, the terms of which are incorporated herein by reference. The Company Confidentiality Agreement shall survive the execution and delivery of this Agreement and shall apply to all information furnished thereunder or hereunder and any other activities contemplated thereby. The Company acknowledges that, in connection with the PIPE Investment, Acquiror shall be entitled to disclose, pursuant to the Exchange Act, any information contained in any presentation to the PIPE Investors, which information may include Information (as defined in the Company Confidentiality Agreement).
(b) Subject to Section 8.05(c), none of the Parties nor any of their respective Representatives shall issue any press releases or make any public announcements (including communications disseminated via social media, news feeds, chat rooms or other similar electronic platforms for communicating to persons who are not otherwise obligated to maintain the confidentiality of such communications) with respect to this Agreement or the Transactions or any subject matter disclosed or required to be disclosed in the Proxy Statement without the prior written consent of the other Parties, prior to the Closing; provided, however, that each Party may make any such announcement or other communication (i) if such announcement or other communication is required by applicable Law or the rules of any stock exchange, in which case the disclosing Party shall, to the extent permitted by applicable Law, first allow (A) the Company, if the disclosing party is Acquiror or (B) Acquiror, if the disclosing party is the Company (prior to the Closing), to review such announcement or communication and the opportunity to comment thereon and the disclosing Party shall consider such comments in good faith, (ii) to the extent such announcements or other communications contain only information previously disclosed in a public statement, press release or other communication previously approved in accordance with this Section 8.05, and (iii) to Governmental Authorities in connection with any consents required to be made under this Agreement or in connection with the Transactions. Notwithstanding anything to the contrary in this Section 8.05 or otherwise in this Agreement, the Parties agree that the Sponsor, Acquiror and their respective Representatives may provide general information about the subject matter of this Agreement and the Transactions to any direct or indirect current or prospective investor (including in connection with the PIPE Investment) or in connection with normal fund raising or related marketing or informational or reporting activities, in each case, so long as such recipients are obligated to keep such information confidential.
(c) The initial press release concerning this Agreement and the Transactions shall be a joint press release in the form agreed by the Company and Acquiror prior to the execution of this Agreement and such initial press release (the “Signing Press Release”) shall be released as promptly as practicable after the execution of this Agreement (but in any event within four Business Days thereafter). Promptly after the execution of this Agreement (but in any event within four Business Days thereafter), Acquiror shall file a current report on Form 8-K (the “Signing Filing”) with the Signing Press Release and a description of this Agreement as required by Securities Laws, which the Company shall have the opportunity to review and comment upon prior to filing and Acquiror shall consider such comments in good faith. The Company, Acquiror and the Sponsor shall mutually agree upon (such agreement not to be unreasonably withheld, conditioned or delayed by any of them) and, as promptly as practicable after the Closing (but in any event within four Business Days thereafter), issue a press release announcing the consummation of the Transactions (the “Closing Press Release”). Promptly after the Closing (but in any event within four Business Days after the Closing), Acquiror shall file a current report on Form 8-K (the “Closing Filing”) with the Closing Press Release and a description of the Closing as required by Securities Laws, which the Sponsor shall have the opportunity to review and comment upon prior to filing and Acquiror shall consider in good faith such comments. In connection with the preparation of the Signing Press Release, the Signing Filing, the Closing Press Release or the Closing Filing, each Party shall, upon written request by any other Party, furnish such other Party with all information concerning itself, its directors, officers and equityholders, and such other matters as may be reasonably necessary for such press release or filing.
Confidentiality and Trade Secrets (a) The Executive acknowledges and agrees that his position as an employee of the Company will afford him a unique opportunity to acquire confidential information concerning the Company and that the misappropriation or disclosure of such confidential information would cause irreparable harm to the Company. The Executive recognizes and agrees that he will have access to certain confidential information of the Company that is not generally available to the public and that such information constitutes valuable, special and unique property of the Company. The Executive acknowledges that such confidential information includes information concerning the Business and the Company including, without limitation, financial information concerning the Business or the Company, the names and addresses of actual and potential customers or acquisition or investment targets of the Business or the Company, studies of prospective market areas for the Business, supply sources, products, technical data, notes, diagrams, drawings, flow charts, ideas, techniques, specifications, procedures, processes, research, development, and trade secrets of the Business and the Company (such information whether related to the Business or the Company being referred to collectively as the “Confidential Information”). Confidential Information shall not include any information or documents (i) that are or become publicly available or otherwise known in the industry without breach of this Section 4.02; or (ii) that the Executive rightfully receives from any third party which is not breaching an obligation of confidence with the Company or without an accompanying obligation of confidence; or (iii) that were known to or by the Executive prior to his appointment with the Company without breach of this Section 4.02. In the event that the Executive is requested in any court or governmental proceeding to disclose any Confidential Information, the Executive shall give the Company prompt notice of such request such that the Company may seek a protective order or other appropriate relief and shall cooperate in all respects with the Company in its efforts in connection therewith.
(b) The Executive will keep confidential and will not, during his employment and for a period of five (5) years after any termination under this Agreement (whether by expiration or pursuant to Section 5.01 or otherwise), directly or indirectly, divulge to anyone, use or otherwise appropriate any of the Confidential Information for any reason or purpose whatsoever except to authorize representatives of the Company or when, in the good faith belief of the Executive, such disclosure is necessary or desirable in the normal course of the Business in order for the Executive to fulfill his duties and responsibilities to the Company as set out in Section 2.02.
(c) The Executive acknowledges and agrees that these prohibitions against disclosure of Confidential Information are in addition to, and not in lieu of, any rights or remedies which the Company may have available pursuant to the laws of any jurisdiction or at common law to prevent the disclosure of trade secrets or proprietary information, and the enforcement by the Company of any of their rights and remedies pursuant to this Agreement shall not be construed as a waiver of any other rights or available remedies which they may possess in law or equity absent this Agreement.
(d) Upon any termination of his employment under this Agreement, the Executive shall surrender to the Company all documents and materials in his possession, custody or control embodying the Confidential Information or any part thereof.
Confidentiality and Data Security (a) The Custodian agrees to keep confidential, and to cause its employees and agents to keep confidential, all records of the Funds and information relating to the Funds, including without limitation information as to their respective shareholders and their respective portfolio holdings, unless the release of such records or information is made (i) in connection with the services provided under this Agreement, (ii) at the written direction of the applicable Fund or otherwise consented to, in writing, by the respective Funds, (iii) in response to a request of a governmental, regulatory or self-regulatory authority or agency or pursuant to a subpoena, court order or other legal process, in each case with respect to which the Custodian has determined, on the advice of counsel, that it is required to comply, or (iv) where the Custodian has determined, on the advice of counsel, that the failure to release such information would expose the Custodian to civil or criminal contempt proceedings; provided in the case of clause (iii) or (iv) the Custodian provides the applicable Fund written notice of such requirement to release such records or information, to the extent such notice is permitted. The foregoing shall not be applicable to any information that is publicly available when provided and shall cease to be applicable to any information that thereafter becomes publicly available, other than through a breach of this Section 10(a), or that is independently derived by any party hereto without the use of any information derived in connection with the services provided under this Agreement. Notwithstanding the foregoing but subject to Section 10(d), (1) the Custodian may use information regarding the Funds in connection with certain functions performed on a centralized basis by the Custodian, its affiliates or its or their service providers (including audit, accounting, risk, legal, compliance, sales, administration, product communication, relationship management, compilation and analysis of customer-related data and storage) and disclose such information to its affiliates and to its or their service providers who are subject to the confidentiality obligations hereunder with respect to such information, but only for the purpose of servicing the Funds in connection with the relationship contemplated by this Agreement or providing additional services to the Funds, and (2) the Custodian may aggregate Fund or Portfolio data with similar data of other customers of the Custodian (“Aggregated Data”) and may use Aggregated Data so long as such Aggregated Data represents such a sufficiently large sample that no Fund or Portfolio data can be identified either directly or by inference or implication.
(b) Each Fund agrees to keep confidential all information obtained hereunder relating to the Custodian’s business (it being understood, however, that the existence and the terms of this Agreement are required to be publicly disclosed by the Funds), unless the release of such records or information is (i) necessary to facilitate the receipt of services provided under this Agreement, (ii) in response to a request of a governmental, regulatory or self-regulatory authority or agency or pursuant to a subpoena, court order or other legal process, in each case with respect to which the Fund has determined, on the advice of counsel, that it is required to comply, or (iii) where the Fund has determined, on the advice of counsel, that the failure to release such information would expose the Fund to civil or criminal contempt proceedings; provided in the case of clause (ii) or (iii) the Fund provides the Custodian written notice of such requirement to release such records or information, to the extent such notice is permitted. The foregoing shall not be applicable to any information that is publicly available when provided and shall cease to be applicable to any information that thereafter becomes publicly available, other than through a breach of this Agreement, or that is independently derived by any party hereto without the use of any information derived in connection with the services provided under this Agreement.
(c) Notwithstanding any provision herein to the contrary, each party hereto agrees that any Nonpublic Personal Information, as defined under Section 248.3(t) of Regulation S-P (“Regulation S-P”), promulgated under the Xxxxx-Xxxxx-Xxxxxx Act (the “GLB Act”), disclosed or otherwise made accessible by a party hereunder is for the specific purpose of permitting the other party to perform its duties as set forth in this Agreement. Each party agrees that, with respect to such information, it will comply with Regulation S-P and the GLB Act and that it will not disclose any Nonpublic Personal Information received in connection with this Agreement to any other party, except to the extent necessary to carry out the services set forth in this Agreement or as otherwise permitted by Regulation S-P or the GLB Act.
(d) Without limiting the generality of Section 10(a) hereof, the Custodian acknowledges and agrees that the Funds are prohibited by law from making selective public disclosure of information regarding portfolio holdings, that disclosure of any and all such information to the Custodian hereunder is made strictly under the conditions of confidentiality set forth in Section 10(a) hereof and solely for the purposes of the performance of custodial services hereunder, that any unauthorized disclosure or misuse of such information (including by the Custodian or any of its employees or agents, or any trading on the basis of such information by anyone in receipt of such information) may constitute a criminal offense of trading on or tipping of material inside information regarding publicly traded securities, that access to any and all such information regarding portfolio holdings of the Funds shall be restricted to those persons needing such information in the course of the performance of duties hereunder, and that the Custodian shall apprise all such persons having access of the obligation hereunder and under applicable law to prevent unauthorized disclosure of such confidential information.
(e) The parties acknowledge and agree that any breach of Section 10(a) hereof would cause not only financial damage, but irreparable harm to the other party, for which money damages will not provide an adequate remedy. Accordingly, in the event of a breach of Section 10(a) hereof, the non-breaching party shall (in addition to all other rights and remedies it may have pursuant to this Agreement, including without limitation Section 8(g) hereof, and at law and in equity) be entitled to an injunction, without the necessity of posting any bond or surety, to restrain disclosure or misuse, in whole or in part, of any information in violation of Section 10(a) hereof.
(f) The Custodian will implement and maintain a written information security program (the “Security Program”) that contains appropriate security measures designed to safeguard confidential records and information of the Funds consistent with applicable statutes, laws, rules and regulations, and definitive and binding guidance or interpretations by applicable authorities of any of the foregoing from time to time, including without limitation the personal information of the Funds’ shareholders, employees, trustees, directors and/or officers that the Custodian receives, stores, maintains, processes or otherwise accesses in connection with the provision of services hereunder. For these purposes, “personal information” shall mean (i) an individual’s name (first initial and last name or first name and last name), plus (a) social security number, (b) driver’s license number, (c) state identification card number, (d) debit or credit card number, (e) financial account number or (f) personal identification number or password that would permit access to a person’s account or (ii) any combination of the foregoing that would allow a person to log onto or access an individual’s account with the Custodian. Notwithstanding the foregoing “personal information” shall not include information that is lawfully obtained from publicly available information, or from federal, state or local government records lawfully made available to the general public.
(g) The Security Program shall have administrative, technical and physical safeguards, appropriate to the type of information concerned, designed: (i) to maintain the security and confidentiality of records and information of the Funds; (ii) to protect against anticipated threats or hazards to the security or integrity of such records and information; and (iii) to protect against unauthorized access to or use of such records and information. The Custodian shall develop, implement and maintain, at its sole expense, a system or methodology to audit for compliance with the requirements of the preceding sentence that is consistent with the SOC controls framework. Such safeguards will include, but shall not be limited to, virus protection, password protection and encryption of data in transmission at a minimum standard of AES 256. The Custodian will provide the Fund, at least annually, with the most recent SOC reports of its systems and methodologies prepared by an independent third party, and will provide executive summaries of its most recent penetration and ethical hack testing of its internet-facing environment relevant to the systems used to provide services under this Agreement (in the form generally provided by the Custodian to other similarly situated customers of services similar to the services provided under this Agreement), as conducted by a qualified, independent third party selected by the Custodian. The Custodian shall maintain books and records sufficient to demonstrate its compliance with the terms of this Section 10(g).
(h) Upon reasonable notice to the Custodian, the Custodian will arrange for its relevant subject matter experts to meet with the relevant subject matter experts of the Funds once annually and at such other times as the Funds may reasonably request to review the Custodian’s security controls and any deficiencies identified in the SSAE-18 audit reports, and for the Custodian to review with the Funds the penetration testing results and provide such additional information concerning the penetration tests as the Custodian determines to be prudent. At such meeting, the Funds may view the Custodian’s security-related policies and procedures; however, no documentation may be copied, shared, transmitted or removed from the Custodian’s premises, except as mutually agreed. In the event that the Funds identify any control deficiencies, the Custodian will discuss such findings with the Funds and will use reasonable efforts to develop a mutually agreeable remediation plan. All nonpublic documentation and information disclosed to the Funds in accordance with this Section 10(h) shall be deemed proprietary and confidential information of the Custodian. The Funds shall not disclose such documentation or information to any third party (except to the extent permitted, necessary or required pursuant to Section 10(b)) or use it for any purpose other than evaluating the Custodian’s security controls, except that the Funds may disclose the Custodian’s SSAE-18 summary to the Funds’ external auditors provided that such external auditors are required to maintain the confidentiality of the summary and any related information.
(i) In the event of any actual or reasonably suspected, based on Custodian’s experience, breach of security of its systems resulting in the actual, probable or reasonably suspected unauthorized access to or acquisition, use, loss, destruction, compromise or disclosure of any of the confidential records or information of a Fund (each, a “Security Breach”), upon learning of the Security Breach, the Custodian shall notify such Fund as promptly as reasonably possible of the relevant facts related to such Security Breach then known to the Custodian, and of additional relevant facts promptly after they become known to the Custodian, in the manner provided in Section 12 hereof and also by sending notice to xxxxxxxxxxxxx@xxxxxxxxx.xxx and/or such other electronic mail address or addresses as a Fund may specify by written notice to the Custodian. The Custodian shall at its sole cost: (i) promptly investigate such Security Breach; (ii) resolve or mitigate the vulnerability that facilitated the Security Breach to the extent possible; (iii) restore any lost or damaged data using generally accepted data restoration techniques; and (iv) conduct a root cause analysis to provide the Fund with a summary of the findings and actions taken to prevent recurrence of such Security Breach. If a Security Breach occurs with respect to personal information in the possession or under the control of the Custodian or any of its affiliates, subsidiaries, agents or employees the Custodian shall be responsible for each Fund’s reasonable costs associated with responding to such Security Breach, including, but not limited to, the costs of notifying affected individuals and taking any remedial action required by applicable statutes, laws, rules and regulations and any such other remedial action that the Custodian reasonably deems necessary (with due regard for industry standards, if any).
(j) If the Custodian uses any subsidiary or affiliate or, pursuant to Section 2.6(a), agent to perform the duties assigned to the Custodian by this Agreement, such subsidiary, affiliate or agent shall have appropriate controls in place to meet the objectives of this Section 10, and the Custodian shall exercise oversight over each such subsidiary, affiliate or agent to ensure ongoing compliance with the objectives of this Section 10. The Custodian will require each Foreign Sub-Custodian that it engages to provide services under this Agreement to establish and maintain reasonably designed safeguards and controls against the unauthorized access to and use of Fund data and information.
Confidentiality and Privacy The Training Provider must not, without the prior written approval of the Department, disclose (or permit the disclosure of) information regarding this VET Funding Contract (including details of the Funds being provided by the Department in respect of any individual) or any Confidential Information of the Department or the State, except: to the extent required under this VET Funding Contract; to the extent required by Law; to its solicitors, barristers and/or other professional advisors in order to obtain advice in relation to its rights under this VET Funding Contract, the Training Services or the Funds and provided such advisors are under a duty of confidentiality; to the extent necessary for the registration or recording of documents where required; and/or to the extent required in connection with legal proceedings, and then only to the extent strictly necessary for that purpose. The Training Provider acknowledges and agrees that: the Department may disclose or otherwise make available (whether to the public generally or to any particular person or group of persons) any and all information relating to the Training Provider and this VET Funding Contract (including Confidential Information of the Training Provider), including: course and qualification details; government subsidised fee information; details of the Funds paid; the contents of any surveys in which the Training Provider participates pursuant to Clause 4.5(j)(ii) or any employer surveys; any information that the Training Provider is required to publish on its website or otherwise make publicly available under this VET Funding Contract; details of any non-compliance by the Training Provider with this VET Funding Contract; any action taken by the Department under this VET Funding Contract; and findings and outcomes of any audits or reviews undertaken pursuant to this VET Funding Contract, as it considers reasonably appropriate to facilitate the proper operation of the Skills First Program, including as contemplated by Clause 12.3 of Schedule 1; the Department may disclose information referred to in paragraph (a), and any information regarding any suspected non-compliance by the Training Provider with this VET Funding Contract, for the purpose of satisfying its obligations under: the Freedom of Information Act 1982 (Vic); the Ombudsman Act 1973 (Vic); or the Audit Act 1994 (Vic); or the requirements of Parliamentary accountability or a Minister's obligations to fulfil their duties of office; and the Department may disclose information referred to in paragraph (a) or paragraph (b) to the counterparty to any Other VET Funding Arrangement, any regulator who has responsibility for issuing or monitoring compliance with the applicable registration referred to in Clause 4.1(a), or other government entity in any jurisdiction that has an interest in the regulation and funding of the VET sector. The Training Provider must take all steps and make all efforts to assist the Department in complying with any of the obligations referred to in Clause 13.2(b). The Training Provider acknowledges that it will be bound by the Information Privacy Principles and any applicable Code of Practice with respect to any act done or practice engaged in by the Training Provider under or in connection with this VET Funding Contract in the same way and to the same extent as the Department would have been bound had it been directly done or engaged in by the Department. The Training Provider must include a standard privacy notice in all enrolment forms, in accordance with the Victorian VET Student Statistical Collection Guidelines, which advises Eligible Individuals how their data may be supplied to and used by the Department and Commonwealth VET Student Loan agencies. The Training Provider must, in collecting any Personal Information for the purposes of this VET Funding Contract, ensure that it has obtained all necessary consents for: the Training Provider to collect, use, hold and disclose that Personal Information, including by disclosing it to the Department as contemplated by this VET Funding Contract (including by way of the submission of reports under Clause 12 of Schedule 1, for the purposes of complying with Record disclosure obligations under Clause 10 and in the course of any audit, review or investigation under Clause 11); and the Department to collect, use, hold and disclose that Personal Information for the purposes of this VET Funding Contract and its operation and management of the Skills First Program, in accordance with all applicable Laws, including the PDP Act, the Health Records Act and (if applicable to the Training Provider) the Privacy Act 1988 (Cth). The Training Provider must cooperate with, and provide any assistance requested by, the Department in relation to: resolving any complaint made to the Department alleging a breach of the PDP Act or the Health Records Act in relation to any Personal Information collected, used, held or disclosed by the Department that was provided to it by the Training Provider in connection with this VET Funding Contract; and providing access to or amendment of any record of Personal Information collected, used, held or disclosed in connection with this VET Funding Contract following a request from an individual made to the Department.
