D ata Security. The Provider agrees to abide by and maintain adequate data security measures, consistent with industry standards and technology best practices, to protect Student Data from unauthorized disclosure or acquisition by an unauthorized person. The general security duties of Provider are set forth below. Provider may further detail its security programs and measures in Exhibit “F” hereto. These measures shall include, but are not limited to:
D ata Security. 42Gears and any third-party service provider that 42Gears may engage shall employ commercially reasonable physical, administrative, and technical safeguards to secure any Customer Data in its possession, custody, or control from unauthorized use or disclosure.
D ata Security. Unaro shall implement and maintain commercially reasonable technical and organisational security measures designed to meet the following objectives: (i) ensure the security and confidentiality of Customer Data in the custody of and processed by Unaro; (ii) protect against any anticipated threats or hazards to the security or integrity of such Customer Data; (iii) protect against unauthorised access to or use of such Customer Data; and (iv) ensure that Unaro’s return or disposal of such Customer Data is performed in a manner consistent with Unaro’s obligations under items (i)-(iii).
D ata Security. Vendor shall take all appropriate legal, organizational and technical measures to protect against unlawful and unauthorized processing of Personal Data or Phase Four Confidential Information (“Confidential Data”). Vendor shall maintain reasonable operating standards and security procedures, and shall use its best efforts to secure Confidential Data through the use of appropriate physical and logical security measures including, but not limited to, appropriate network security and encryption technologies, and the use of reasonable user identification or password control requirements, including multiple-factor authentication, strong passwords, session time-outs, and other security procedures as may be issued from time to time by Phase Four. If requested by Phase Four at any time during the term of this Agreement, Vendor shall provide Phase Four with a copy of Vendor’s then current security policy. Vendor shall promptly notify Phase Four in the event that Vendor learns or has reason to believe that any person or entity has breached or attempted to breach Vendor’s security measures, or gained unauthorized access to Confidential Data (“Information Security Breach”). Upon any such discovery, Vendor will (a) investigate, remediate, and mitigate the effects of the Information Security Breach, and (b) provide Phase Four with assurances reasonably satisfactory to Phase Four that such Information Security Breach will not recur. If Phase Four determines that notices (whether in Phase Four’s or Vendor’s name) or other remedial measures (including notice, credit monitoring services, fraud insurance and the establishment of a call center to respond to customer inquiries) are warranted following a Security Breach, Vendor will, at Phase Four’s request and at Vendor’s cost and expense, undertake the aforementioned remedial actions.
D ata Security. Calm will maintain reasonable timely written notice of such disclosure requirement to administrative, physical and technical safeguards as determined within Calm’s discretion that are designed to prevent unauthorized access, use or disclosure of Customer Data and Service Data.
