Common use of Privacy and Security Provisions Clause in Contracts

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).. Administration Agreement

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; andand Administration Agreement (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator Indenture Trustee in connection with this AgreementIndenture, the Administrator Indenture Trustee agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this AgreementIndenture, the Administrator Indenture Trustee shall comply with all reuse, redisclosure, or other customer information handling, processing, security, notification and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal and State consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator Indenture Trustee agrees that: (a) the Administrator Indenture Trustee is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the AdministratorIndenture Trustee, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections Sections 40.14 or 40.15 or 16 CFR sections Sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator Indenture Trustee has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (ai) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (bii) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or master servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust Issuer (or on the TrustIssuer’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or master servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust Issuer or on the TrustIssuer’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator Indenture Trustee in connection with this Agreement, the Administrator Indenture Trustee agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator Indenture Trustee shall comply with all reuse, redisclosure, or other customer information handling, processing, security, notification and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal and state consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator Indenture Trustee agrees that: (a) the Administrator Indenture Trustee is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the AdministratorIndenture Trustee, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator Indenture Trustee has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that:: Administration Agreement (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “"non-public personal information” " (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s 's behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “"non-public personal information” " (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s 's behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s 's Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and Administration Agreement protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).. Administration Agreement 38

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party processor or Administration Agreement servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator Eligible Lender Trustee in connection with this Agreement, the Administrator Eligible Lender Trustee agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator Eligible Lender Trustee shall comply with all reuse, redisclosure, or other customer information handling, processing, security, notification and protection requirements that are specifically required of a non-affiliated third-party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal and state consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator Eligible Lender Trustee agrees that: (a) the Administrator Eligible Lender Trustee is prohibited from disclosing or using any “non-public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the AdministratorEligible Lender Trustee, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; and (b) and the Administrator Eligible Lender Trustee has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).

Privacy and Security Provisions. With respect to information that is “non-public non­public personal information” (as defined in the GLB Regulations) that is disclosed or provided by the Trust (or on the Trust’s behalf) to the Administrator in connection with this Agreement, the Administrator agrees, subject to the terms hereof and the limitations of liability set forth herein, that in performing its obligations under this Agreement, the Administrator shall comply with all reuse, redisclosure, or other customer information handling, processing, security, and protection requirements that are specifically required of a non-affiliated third-party non­affiliated third­party processor or servicer (or subcontractor) under the GLB Regulations and other applicable federal consumer privacy laws, rules, and regulations. Without limiting the foregoing, the Administrator agrees that: (a) the Administrator is prohibited from disclosing or using any “non-public non­public personal information” (as defined in the GLB Regulations) disclosed or provided by the Trust or on the Trust’s behalf to the Administrator, except solely to carry out the purposes for which it was disclosed, including use under an exception contained in 12 CFR sections 40.14 or 40.15 or 16 CFR sections 313.14 or 313.15, as applicable, of the GLB Regulations in the ordinary course of business to carry out those purposes; purposes; and (b) the Administrator has implemented and will maintain an information security program designed to meet the objectives of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information, Final Rule (12 CFR Part 30, Appendix B) and the Federal Trade Commission’s Standards for Safeguarding Customer Information (16 CFR Part 314).