Personal Information Safeguards Sample Clauses

Personal Information Safeguards. (a) Taking into account the nature of the Processing, Service Provider has in place a written information security policy that complies with applicable Requirements. Service Provider’s information security program includes appropriate administrative, technical and physical safeguards and other technical and organizational security measures designed to (i) ensure the security and confidentiality of Personal Information; (ii) protect against any anticipated threats or hazards to the security and integrity of Personal Information; and (iii) protect against any actual or suspected unauthorized Processing, loss, use, disclosure or acquisition of or access to any Personal Information (hereinafter “Information Security Incident”). (b) Service Provider shall inform Customer of any Information Security Incident of which Service Provider becomes aware as soon as reasonably possible, by providing notice via email using an email designated by Customer. Such notice shall summarize in reasonable detail the effect on Customer, if known, the nature and cause of the Information Security Incident (including, if known, a description of the Personal Information involved and approximate number of individuals and Personal Information records affected, and the likely consequences of the Information Security Incident), the date and/or time period during which the Information Security Incident is believed to have occurred, and the corrective actions taken or to be taken by Service Provider. Service Provider shall provide regular updates to Customer as additional information becomes available. Service Provider shall promptly take all necessary and advisable corrective actions, and shall cooperate fully with Customer in all reasonable and lawful efforts to prevent, mitigate or rectify such Information Security Incident. Service Provider shall keep and maintain a record of every Information Security Incident in connection with the services provided by Service Provider under the Agreement, and provide a copy of such records to Customer promptly upon request. (c) Service Provider shall exercise the necessary and appropriate supervision over its relevant Personnel to maintain appropriate privacy, confidentiality and security of Personal Information. Service Provider shall provide training, as appropriate, regarding the privacy, confidentiality, and information security requirements set forth in this Addendum to relevant Personnel who have access to Personal Information. (d) Promptly upo...

Personal Information Safeguards. Under the Agreement, Supplier will not receive, or have access to, use, process, or store Personal Information (as defined below). If, however, Supplier receives, or has access to, uses, processes, or stores Personal Information under the Agreement, then this Subsection will apply (in addition to Section 7.2(F)).