Common use of Non-Public Personal Information Clause in Contracts

Non-Public Personal Information. Information about the Company’s and its Subsidiaries’ accountholders, which includes any bank customer information governed by general bank privacy laws, the Gramm Lxxxx Bxxxxx Act of 1999, or the Health Insurance Portability and Accountability Act of 1996, and which is disclosed to the Company or its Subsidiaries through application and transaction processing shall be used by the Company and its Subsidiaries only to acquire and support accountholders as authorized. The Company and its Subsidiaries agree to maintain the confidentiality of this non-public personal information (“NPPI”), and to use it, and disclose it only to authorized entities for the sole purpose of protecting the Company, its Subsidiaries, and its and their accountholders from actual or potential fraud, unauthorized transactions, claims or other liability, as well as to resolve accountholder disputes or inquiries. The Company and its Subsidiaries shall establish administrative, technical and physical safeguards for accountholder records and information in the Company’s or its Subsidiaries’ control or possession. Such safeguards shall be designed for the purpose of: (i) ensuring the security of such records and information; (ii) protecting against any anticipated threats or hazards to the security or integrity of such records and information; and (iii) protecting against unauthorized access to, or use of such records and information that would result in substantial harm or inconvenience to any accountholder.