Common use of Information Security Clause in Contracts

Information Security. 10.1 The Transfer Agent shall maintain reasonable safeguards for maintaining in confidence any and all Fund Confidential Information, including, without limitation, the policies and procedures described in Section 10.2. The Transfer Agent shall not, at any time, use any such Fund Confidential Information for any purpose other than as specifically authorized by this Agreement, or in writing by the Fund. 10.2 The Transfer Agent has implemented and maintains, and at a minimum agrees to comply with and continue to comply with, at each service location physical and information security and data protection safeguards against the destruction, loss, theft, unauthorized access, unauthorized use, or alteration of the Fund’s Confidential Information in the possession of the Transfer Agent that will be no less rigorous than those described in the Information Security Schedule attached hereto as Schedule 10.2, and from time to time enhanced in accordance with changes in regulatory requirements. The Transfer Agent will, at a minimum, update its policies to remain compliant with applicable regulatory requirements, including, without limitation, the GLB Act and the Mass Privacy Act. The Transfer Agent will meet with the Fund, at its request, on an annual basis to discuss information security safeguards. If the Transfer Agent or its agents discover or are notified that someone has violated security relating to the Fund’s Confidential Information the Transfer Agent will promptly (a) notify the Fund of such violation, and (b) if the applicable Confidential Information was in the possession or under the control of the Transfer Agent or its agents at the time of such violation, the Transfer Agent will promptly (i) investigate, contain and address the violation, (ii) provide the Funds with information on the steps being taken to reduce the risk of a reoccurrence of such violation, and (iii) without limiting (and subject to) Sections 7 and 8 of this Agreement, if requested by the Fund based on the facts and circumstances of the incident, provide credit monitoring, or other similar services or remedies as required by applicable law, for a one-year period (or such shorter or longer period required by applicable law) to Shareholders or others affected by the violation. .