Common use of Data and Data Security Clause in Contracts

Data and Data Security. In the Course Portal, Agency will have access to certain information about Enrolled Agency Clients, which may include: names and addresses, phone number, date of birth, gender, marital and education status, veteran and disabled status, number and dependents living in the household, income information, race and ethnicity information, home purchase steps completed, first time homebuyer and first generation homebuyer status, and Course information (collectively, the “Enrolled Agency Client Information”). Agency shall at all times provide industry DocuSign Envelope ID: 29AC90C7-19F8-4798-B006-279A30CF74C4 standard security measures to ensure that all Enrolled Agency Client Information that is accessed or accessible by Agency is maintained and used (a) in compliance with applicable law, (b) only in connection with uses specified immediately below, and (c) in a manner that prevents the unauthorized disclosure of, unauthorized use of, unauthorized access to, misappropriation of, loss of, or alteration of any Enrolled Agency Client Information while it is directly or indirectly in the possession or control of Agency. Such security measures shall include, without limitation, taking those steps Agency would take to protect the confidentiality of its own most valuable confidential information and implementing and maintaining appropriate administrative, technical and physical safeguards to protect against reasonably anticipated threats or hazards to the privacy, security, integrity and/or confidentiality of Enrolled Agency Client Information. Agency shall notify Framework immediately of any known or suspected security breaches or holes. As between Framework and Agency, Framework shall be the owner of the Enrolled Agency Client Information. The Enrolled Agency Client Information may only be used by Agency (i) to make contact with the subject Enrolled Agency Clients in direct connection with the counseling services being provided to them by Agency, and (ii) for the preparation and filing of any reports required by applicable law. Agency shall never use, or enable another person or organization to use, any of the Enrolled Agency Client Information for any commercial purpose, including without limitation, for marketing, surveys, reviews, outreach, evaluations, or sales of products or services. Upon the termination of this Agreement, Agency shall maintain or dispose of the Enrolled Agency Client Information in its possession or control in compliance with applicable law and any federal grant requirements.