CONFIDENTIALITY AND PRIVACY POLICIES AND LAWS The Contractor shall comply to the extent applicable with all State and Authorized User policies regarding compliance with various confidentiality and privacy laws, rules and regulations, including but not limited to the IRS Publication 1075, Family Educational Rights and Privacy Act (FERPA), the Health Insurance and Portability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). Contractor shall cooperate in executing a written confidentiality agreement under FERPA and/or a Business Associate Agreement (HIPAA/HITECH) or other contractual provisions upon request by the State or any Authorized User.
Disclosure and Use 20.2.1 Each Receiving Party agrees that, from and after the Effective Date:
(a) all such Proprietary Information communicated or discovered, whether before, on or after the Effective Date, in connection with this Agreement shall be held in confidence to the same extent as such Receiving Party holds its own confidential information; provided, that such Receiving Party shall not use less than a reasonable standard of care in maintaining the confidentiality of such information;
(b) it will not, and it will not permit any of its employees, contractors, consultants, agents or affiliates to disclose such Proprietary Information to any other third person;
(c) it will disclose Proprietary Information only to those of its employees, contractors, consultants, agents and affiliates who have a need for it in connection with the use or provision of services required to fulfill this Agreement;
(d) it will, and will cause each of its employees, contractors, consultants, agents and affiliates to use such Proprietary Information only to effectuate the terms and conditions of this Agreement and for no other purpose;
(e) it will cause each of its affiliates to execute individual confidentiality agreements containing the same restrictions as this Article XX; and
(f) it will, and will cause each of its employees, contractors, consultants, agents and affiliates, to use such Proprietary Information to create only that Derivative Information necessary for such Receiving Party's compliance with Applicable Law or its performance under the terms of this Agreement.
20.2.2 Any Receiving Party so disclosing Proprietary Information to its employees, contractors, consultants, agents or affiliates shall be responsible for any breach of this Agreement by any of its employees, contractors, consultants, agents or affiliates and such Receiving Party agrees to use its reasonable efforts to restrain its employees, contractors, consultants, agents or affiliates from any prohibited or unauthorized disclosure or use of the Proprietary Information and to assist the Disclosing Party in its efforts to protect such information from disclosure. Each Receiving Party making such disclosure shall notify the Disclosing Party as soon as possible if it has knowledge of a breach of this Agreement in any material respect.
20.2.3 Proprietary Information shall not be reproduced by any Receiving Party in any form except to the extent (i) necessary to comply with the provisions of Section 20.3 and (ii) reasonably necessary to perform its obligations under this Agreement. All such reproductions shall bear the same copyright and proprietary rights notices as are contained in or on the original.
Confidentiality of Vendor Data Vendor understands and agrees that by signing this Agreement, all Vendor Data is hereby released to TIPS, TIPS Members, and TIPS third-party administrators to effectuate Vendor’s TIPS Contract except as provided for herein. The Parties agree that Vendor Data is accessible by all TIPS Members as if submitted directly to that TIPS Member Customer for purchase consideration. If Vendor otherwise considers any portion of Vendor’s Data to be confidential and not subject to public disclosure pursuant to Chapter 552 Texas Gov’t Code (the “Public Information Act”) or other law(s) and orders, Vendor must have identified the claimed confidential materials through proper execution of the Confidentiality Claim Form which is required to be submitted as part of Vendor’s proposal resulting in this Agreement and incorporated by reference. The Confidentiality Claim Form included in Vendor’s proposal and incorporated herein by reference is the sole indicator of whether Vendor considers any Vendor Data confidential in the event TIPS receives a Public Information Request. If TIPS receives a request, any responsive documentation not deemed confidential by you in this manner will be automatically released. For Vendor Data deemed confidential by you in this manner, TIPS will follow procedures of controlling statute(s) regarding any claim of confidentiality and shall not be liable for any release of information required by law, including Attorney General determination and opinion. In the event that TIPS receives a written request for information pursuant to the Public Information Act that affects Vendor’s interest in any information or data furnished to TIPS by Vendor, and TIPS requests an opinion from the Attorney General, Vendor may, at its own option and expense, prepare comments and submit information directly to the Attorney General stating why the requested information is exempt from disclosure pursuant to the requirements of the Public Information Act. Vendor is solely responsible for submitting the memorandum brief and information to the Attorney General
Non-Disclosure and Confidentiality 9.1 In connection with the investment by the Purchaser in the Note contemplated hereunder (the "Transaction"), the Company will furnish to the Purchaser certain information that is either non-public, confidential or proprietary in nature (the "Confidential Information").
9.2 Pursuant to the U.S. Securities and Exchange Commission's Regulation FD, the Company is permitted to disclose to the Purchaser on a confidential basis, Confidential Information so long as the Purchaser agrees to bound by the terms of this Article 9.
9.3 The Purchaser acknowledges that the Confidential Information will be provided to the Purchaser, or the Purchaser will be granted access to the Confidential Information, solely for the purposes of evaluating the Transaction, and the Purchaser agrees to receive the Confidential Information on the following terms and conditions:
(a) that the Confidential Information is to be received and maintained in confidence;
(b) that no copies, summaries or reproductions of the Confidential Information or any part thereof may be made without the prior written consent of the Company except as may be reasonably necessary to evaluate the Transaction;
(c) the Purchaser will not, directly or indirectly, disclose, communicate or make known the Confidential Information or any part thereof to any person, firm or corporation for any purpose other than evaluating the Transaction;
(d) the Purchaser will take all reasonable precautions to safeguard the Confidential Information against unauthorised disclosure;
(e) that upon request by the Company, the Purchaser will promptly return to the Company, all Confidential Information, including all reproductions and copies thereof together with all materials and documents created by the Purchaser containing Confidential Information or references thereto from which reference to the substance of the Confidential Information can be implied or understood;
(f) that the Confidential Information shall be disclosed only to those professional advisers of the Purchaser (collectively, the "Permitted Persons") as are reasonably necessary to accomplish the purpose(s) of this Agreement;
(g) that the confidential and proprietary nature of the Confidential Information shall be communicated to the Permitted Persons; and
(h) the Purchaser will be responsible for any unauthorised use or disclosure of Confidential Information by the Permitted Persons and by any and all other persons to whom it discloses the Confidential Information.
9.4 The Purchaser hereby acknowledges that the Purchaser is aware, and further agrees that the Purchaser will advise the Permitted Persons, that United States securities laws prohibit any person who has material, non-public information about a company from purchasing or selling securities of such a company or from communicating such information to any other person under circumstances in which it is reasonably foreseeable that such person is likely to purchase or sell such securities.
9.5 If the Purchaser is required by any applicable law, stock exchange regulations or court order to disclose any Confidential Information, the Purchaser shall first notify the Company in writing, sufficiently in advance so as to provide the Company with reasonable opportunity to seek to prevent such disclosure or to seek to obtain a protective order for such Confidential Information.
CONFIDENTIALITY OF DATA 23.1 All financial, statistical, personal, technical, or other data and information relative to the Department’s operations, which is designated confidential by the Department and made available to the Construction Manager in order to carry out this Preconstruction Services Contract, shall be protected by the Construction Manager from unauthorized use and disclosure.
23.2 Permission to disclose information on one occasion or public hearing held by the Department relating to this Preconstruction Services Contract shall not authorize the Construction Manager to further disclose such information or disseminate the same on any other occasion.
23.3 The Construction Manager shall not comment publicly to the press or any other media regarding this Preconstruction Services Contract or the Department’s actions on the same, except to the Department’s staff, Construction Manager’s own personnel involved in the performance of this Preconstruction Services Contract, at public hearings, or in response to questions from a Legislative committee.
23.4 The Construction Manager shall not issue any news release or public relations item of any nature whatsoever regarding work performed or to be performed under this Preconstruction Services Contract without prior review of the contents thereof by the Department and receipt of the Department’s written permission.
23.5 All information related to the construction estimate is confidential and shall not be disclosed by the Construction Manager to any entity, other than the Department.
23.6 Subject to the California Records Act (California Government Code §§ 6250 et seq.), the Department has taken measures to protect the confidentiality of the negotiations related to the construction estimate. Every person involved in the process shall sign a confidentiality and nondisclosure agreement. However, under no circumstances will the Department be responsible or liable to the Construction Manager or any other party as a result of disclosing any materials, whether the disclosure is deemed required by law, by an order of court, or occurs through inadvertence, mistake, or negligence on the part of Department or its respective officers, employees, contractors, or consultants.
23.7 In the event Department is requested to disclose any of the materials identified by the Construction Manager as confidential, Department will promptly notify the Construction Manager so that Proposer may seek a protective order or other appropriate remedy. If the Construction Manager wishes to protect the materials from disclosure, the Construction Manager shall seek court protection immediately on an emergency basis. In the event that such protective order or other remedy is not sought by the Construction Manager within seven (7) days after the Construction Manager receives notice from Department, Department will be free to release the requested information. Department will consider the Construction Manager to have waived any claim of confidentiality and exemption from public disclosure for any materials not identified as confidential. Construction Managers are advised to consult with their legal counsel regarding the scope and provisions of the Public Records Act.
Confidentiality and Data Security (a) The Custodian agrees to keep confidential, and to cause its employees and agents to keep confidential, all records of the Funds and information relating to the Funds, including without limitation information as to their respective shareholders and their respective portfolio holdings, unless the release of such records or information is made (i) in connection with the services provided under this Agreement, (ii) at the written direction of the applicable Fund or otherwise consented to, in writing, by the respective Funds, (iii) in response to a request of a governmental, regulatory or self-regulatory authority or agency or pursuant to a subpoena, court order or other legal process, in each case with respect to which the Custodian has determined, on the advice of counsel, that it is required to comply, or (iv) where the Custodian has determined, on the advice of counsel, that the failure to release such information would expose the Custodian to civil or criminal contempt proceedings; provided in the case of clause (iii) or (iv) the Custodian provides the applicable Fund written notice of such requirement to release such records or information, to the extent such notice is permitted. The foregoing shall not be applicable to any information that is publicly available when provided and shall cease to be applicable to any information that thereafter becomes publicly available, other than through a breach of this Section 10(a), or that is independently derived by any party hereto without the use of any information derived in connection with the services provided under this Agreement. Notwithstanding the foregoing but subject to Section 10(d), (1) the Custodian may use information regarding the Funds in connection with certain functions performed on a centralized basis by the Custodian, its affiliates or its or their service providers (including audit, accounting, risk, legal, compliance, sales, administration, product communication, relationship management, compilation and analysis of customer-related data and storage) and disclose such information to its affiliates and to its or their service providers who are subject to the confidentiality obligations hereunder with respect to such information, but only for the purpose of servicing the Funds in connection with the relationship contemplated by this Agreement or providing additional services to the Funds, and (2) the Custodian may aggregate Fund or Portfolio data with similar data of other customers of the Custodian (“Aggregated Data”) and may use Aggregated Data so long as such Aggregated Data represents such a sufficiently large sample that no Fund or Portfolio data can be identified either directly or by inference or implication.
(b) Each Fund agrees to keep confidential all information obtained hereunder relating to the Custodian’s business (it being understood, however, that the existence and the terms of this Agreement are required to be publicly disclosed by the Funds), unless the release of such records or information is (i) necessary to facilitate the receipt of services provided under this Agreement, (ii) in response to a request of a governmental, regulatory or self-regulatory authority or agency or pursuant to a subpoena, court order or other legal process, in each case with respect to which the Fund has determined, on the advice of counsel, that it is required to comply, or (iii) where the Fund has determined, on the advice of counsel, that the failure to release such information would expose the Fund to civil or criminal contempt proceedings; provided in the case of clause (ii) or (iii) the Fund provides the Custodian written notice of such requirement to release such records or information, to the extent such notice is permitted. The foregoing shall not be applicable to any information that is publicly available when provided and shall cease to be applicable to any information that thereafter becomes publicly available, other than through a breach of this Agreement, or that is independently derived by any party hereto without the use of any information derived in connection with the services provided under this Agreement.
(c) Notwithstanding any provision herein to the contrary, each party hereto agrees that any Nonpublic Personal Information, as defined under Section 248.3(t) of Regulation S-P (“Regulation S-P”), promulgated under the Xxxxx-Xxxxx-Xxxxxx Act (the “GLB Act”), disclosed or otherwise made accessible by a party hereunder is for the specific purpose of permitting the other party to perform its duties as set forth in this Agreement. Each party agrees that, with respect to such information, it will comply with Regulation S-P and the GLB Act and that it will not disclose any Nonpublic Personal Information received in connection with this Agreement to any other party, except to the extent necessary to carry out the services set forth in this Agreement or as otherwise permitted by Regulation S-P or the GLB Act.
(d) Without limiting the generality of Section 10(a) hereof, the Custodian acknowledges and agrees that the Funds are prohibited by law from making selective public disclosure of information regarding portfolio holdings, that disclosure of any and all such information to the Custodian hereunder is made strictly under the conditions of confidentiality set forth in Section 10(a) hereof and solely for the purposes of the performance of custodial services hereunder, that any unauthorized disclosure or misuse of such information (including by the Custodian or any of its employees or agents, or any trading on the basis of such information by anyone in receipt of such information) may constitute a criminal offense of trading on or tipping of material inside information regarding publicly traded securities, that access to any and all such information regarding portfolio holdings of the Funds shall be restricted to those persons needing such information in the course of the performance of duties hereunder, and that the Custodian shall apprise all such persons having access of the obligation hereunder and under applicable law to prevent unauthorized disclosure of such confidential information.
(e) The parties acknowledge and agree that any breach of Section 10(a) hereof would cause not only financial damage, but irreparable harm to the other party, for which money damages will not provide an adequate remedy. Accordingly, in the event of a breach of Section 10(a) hereof, the non-breaching party shall (in addition to all other rights and remedies it may have pursuant to this Agreement, including without limitation Section 8(g) hereof, and at law and in equity) be entitled to an injunction, without the necessity of posting any bond or surety, to restrain disclosure or misuse, in whole or in part, of any information in violation of Section 10(a) hereof.
(f) The Custodian will implement and maintain a written information security program (the “Security Program”) that contains appropriate security measures designed to safeguard confidential records and information of the Funds consistent with applicable statutes, laws, rules and regulations, and definitive and binding guidance or interpretations by applicable authorities of any of the foregoing from time to time, including without limitation the personal information of the Funds’ shareholders, employees, trustees, directors and/or officers that the Custodian receives, stores, maintains, processes or otherwise accesses in connection with the provision of services hereunder. For these purposes, “personal information” shall mean (i) an individual’s name (first initial and last name or first name and last name), plus (a) social security number, (b) driver’s license number, (c) state identification card number, (d) debit or credit card number, (e) financial account number or (f) personal identification number or password that would permit access to a person’s account or (ii) any combination of the foregoing that would allow a person to log onto or access an individual’s account with the Custodian. Notwithstanding the foregoing “personal information” shall not include information that is lawfully obtained from publicly available information, or from federal, state or local government records lawfully made available to the general public.
(g) The Security Program shall have administrative, technical and physical safeguards, appropriate to the type of information concerned, designed: (i) to maintain the security and confidentiality of records and information of the Funds; (ii) to protect against anticipated threats or hazards to the security or integrity of such records and information; and (iii) to protect against unauthorized access to or use of such records and information. The Custodian shall develop, implement and maintain, at its sole expense, a system or methodology to audit for compliance with the requirements of the preceding sentence that is consistent with the SOC controls framework. Such safeguards will include, but shall not be limited to, virus protection, password protection and encryption of data in transmission at a minimum standard of AES 256. The Custodian will provide the Fund, at least annually, with the most recent SOC reports of its systems and methodologies prepared by an independent third party, and will provide executive summaries of its most recent penetration and ethical hack testing of its internet-facing environment relevant to the systems used to provide services under this Agreement (in the form generally provided by the Custodian to other similarly situated customers of services similar to the services provided under this Agreement), as conducted by a qualified, independent third party selected by the Custodian. The Custodian shall maintain books and records sufficient to demonstrate its compliance with the terms of this Section 10(g).
(h) Upon reasonable notice to the Custodian, the Custodian will arrange for its relevant subject matter experts to meet with the relevant subject matter experts of the Funds once annually and at such other times as the Funds may reasonably request to review the Custodian’s security controls and any deficiencies identified in the SSAE-18 audit reports, and for the Custodian to review with the Funds the penetration testing results and provide such additional information concerning the penetration tests as the Custodian determines to be prudent. At such meeting, the Funds may view the Custodian’s security-related policies and procedures; however, no documentation may be copied, shared, transmitted or removed from the Custodian’s premises, except as mutually agreed. In the event that the Funds identify any control deficiencies, the Custodian will discuss such findings with the Funds and will use reasonable efforts to develop a mutually agreeable remediation plan. All nonpublic documentation and information disclosed to the Funds in accordance with this Section 10(h) shall be deemed proprietary and confidential information of the Custodian. The Funds shall not disclose such documentation or information to any third party (except to the extent permitted, necessary or required pursuant to Section 10(b)) or use it for any purpose other than evaluating the Custodian’s security controls, except that the Funds may disclose the Custodian’s SSAE-18 summary to the Funds’ external auditors provided that such external auditors are required to maintain the confidentiality of the summary and any related information.
(i) In the event of any actual or reasonably suspected, based on Custodian’s experience, breach of security of its systems resulting in the actual, probable or reasonably suspected unauthorized access to or acquisition, use, loss, destruction, compromise or disclosure of any of the confidential records or information of a Fund (each, a “Security Breach”), upon learning of the Security Breach, the Custodian shall notify such Fund as promptly as reasonably possible of the relevant facts related to such Security Breach then known to the Custodian, and of additional relevant facts promptly after they become known to the Custodian, in the manner provided in Section 12 hereof and also by sending notice to xxxxxxxxxxxxx@xxxxxxxxx.xxx and/or such other electronic mail address or addresses as a Fund may specify by written notice to the Custodian. The Custodian shall at its sole cost: (i) promptly investigate such Security Breach; (ii) resolve or mitigate the vulnerability that facilitated the Security Breach to the extent possible; (iii) restore any lost or damaged data using generally accepted data restoration techniques; and (iv) conduct a root cause analysis to provide the Fund with a summary of the findings and actions taken to prevent recurrence of such Security Breach. If a Security Breach occurs with respect to personal information in the possession or under the control of the Custodian or any of its affiliates, subsidiaries, agents or employees the Custodian shall be responsible for each Fund’s reasonable costs associated with responding to such Security Breach, including, but not limited to, the costs of notifying affected individuals and taking any remedial action required by applicable statutes, laws, rules and regulations and any such other remedial action that the Custodian reasonably deems necessary (with due regard for industry standards, if any).
(j) If the Custodian uses any subsidiary or affiliate or, pursuant to Section 2.6(a), agent to perform the duties assigned to the Custodian by this Agreement, such subsidiary, affiliate or agent shall have appropriate controls in place to meet the objectives of this Section 10, and the Custodian shall exercise oversight over each such subsidiary, affiliate or agent to ensure ongoing compliance with the objectives of this Section 10. The Custodian will require each Foreign Sub-Custodian that it engages to provide services under this Agreement to establish and maintain reasonably designed safeguards and controls against the unauthorized access to and use of Fund data and information.
Confidentiality and Privacy The Training Provider must not, without the prior written approval of the Department, disclose (or permit the disclosure of) information regarding this VET Funding Contract (including details of the Funds being provided by the Department in respect of any individual) or any Confidential Information of the Department or the State, except: to the extent required under this VET Funding Contract; to the extent required by Law; to its solicitors, barristers and/or other professional advisors in order to obtain advice in relation to its rights under this VET Funding Contract, the Training Services or the Funds and provided such advisors are under a duty of confidentiality; to the extent necessary for the registration or recording of documents where required; and/or to the extent required in connection with legal proceedings, and then only to the extent strictly necessary for that purpose. The Training Provider acknowledges and agrees that: the Department may disclose or otherwise make available (whether to the public generally or to any particular person or group of persons) any and all information relating to the Training Provider and this VET Funding Contract (including Confidential Information of the Training Provider), including: course and qualification details; government subsidised fee information; details of the Funds paid; the contents of any surveys in which the Training Provider participates pursuant to Clause 4.5(j)(ii) or any employer surveys; any information that the Training Provider is required to publish on its website or otherwise make publicly available under this VET Funding Contract; details of any non-compliance by the Training Provider with this VET Funding Contract; any action taken by the Department under this VET Funding Contract; and findings and outcomes of any audits or reviews undertaken pursuant to this VET Funding Contract, as it considers reasonably appropriate to facilitate the proper operation of the Skills First Program, including as contemplated by Clause 12.3 of Schedule 1; the Department may disclose information referred to in paragraph (a), and any information regarding any suspected non-compliance by the Training Provider with this VET Funding Contract, for the purpose of satisfying its obligations under: the Freedom of Information Act 1982 (Vic); the Ombudsman Act 1973 (Vic); or the Audit Act 1994 (Vic); or the requirements of Parliamentary accountability or a Minister's obligations to fulfil their duties of office; and the Department may disclose information referred to in paragraph (a) or paragraph (b) to the counterparty to any Other VET Funding Arrangement, any regulator who has responsibility for issuing or monitoring compliance with the applicable registration referred to in Clause 4.1(a), or other government entity in any jurisdiction that has an interest in the regulation and funding of the VET sector. The Training Provider must take all steps and make all efforts to assist the Department in complying with any of the obligations referred to in Clause 13.2(b). The Training Provider acknowledges that it will be bound by the Information Privacy Principles and any applicable Code of Practice with respect to any act done or practice engaged in by the Training Provider under or in connection with this VET Funding Contract in the same way and to the same extent as the Department would have been bound had it been directly done or engaged in by the Department. The Training Provider must include a standard privacy notice in all enrolment forms, in accordance with the Victorian VET Student Statistical Collection Guidelines, which advises Eligible Individuals how their data may be supplied to and used by the Department and Commonwealth VET Student Loan agencies. The Training Provider must, in collecting any Personal Information for the purposes of this VET Funding Contract, ensure that it has obtained all necessary consents for: the Training Provider to collect, use, hold and disclose that Personal Information, including by disclosing it to the Department as contemplated by this VET Funding Contract (including by way of the submission of reports under Clause 12 of Schedule 1, for the purposes of complying with Record disclosure obligations under Clause 10 and in the course of any audit, review or investigation under Clause 11); and the Department to collect, use, hold and disclose that Personal Information for the purposes of this VET Funding Contract and its operation and management of the Skills First Program, in accordance with all applicable Laws, including the PDP Act, the Health Records Act and (if applicable to the Training Provider) the Privacy Act 1988 (Cth). The Training Provider must cooperate with, and provide any assistance requested by, the Department in relation to: resolving any complaint made to the Department alleging a breach of the PDP Act or the Health Records Act in relation to any Personal Information collected, used, held or disclosed by the Department that was provided to it by the Training Provider in connection with this VET Funding Contract; and providing access to or amendment of any record of Personal Information collected, used, held or disclosed in connection with this VET Funding Contract following a request from an individual made to the Department.
Restriction on Disclosure and Use of Confidential Information Executive agrees that Executive shall not, directly or indirectly, use any Confidential Information on Executive’s own behalf or on behalf of any Person other than Employer, or reveal, divulge, or disclose any Confidential Information to any Person not expressly authorized by Employer to receive such Confidential Information. This obligation shall remain in effect for as long as the information or materials in question retain their status as Confidential Information. Executive further agrees to fully cooperate with Employer in maintaining the Confidential Information to the extent permitted by law. The Parties acknowledge and agree that this Agreement is not intended to, and does not, alter either Employer’s rights or Executive’s obligations under any state or federal statutory or common law regarding trade secrets and unfair trade practices. Anything herein to the contrary notwithstanding, Executive shall not be restricted from disclosing information that is required to be disclosed by law, court order, or other valid and appropriate legal process; provided, however, that in the event such disclosure is required by law, Executive shall provide Employer with prompt notice of such requirement so that Employer may seek an appropriate protective order prior to any such required disclosure by Executive. Executive understands and acknowledges that nothing in this section limits Executive’s ability to report possible violations of federal, state, or local law or regulation to any governmental agency or entity; to communicate with any government agencies or otherwise participate in any investigation or proceeding that may be conducted by any government agencies in connection with any charge or complaint, whether filed by Executive, on Executive’s behalf, or by any other individual; or to make other disclosures that are protected under the whistleblower provisions of federal, state, or local law or regulation, and Executive shall not need the prior authorization of Employer to make any such reports or disclosures and shall not be required to notify Employer that Executive has made such reports or disclosures. In addition, and anything herein to the contrary notwithstanding, Executive is hereby given notice that Executive shall not be criminally or civilly liable under any federal or state trade secret law for disclosing a trade secret (as defined by 18 U.S.C. § 1839) in confidence to a federal, state, or local government official, either directly or indirectly, or to an attorney, in either event solely for the purpose of reporting or investigating a suspected violation of law; or disclosing a trade secret (as defined by 18 U.S.C. § 1839) in a complaint or other document filed in a lawsuit or other proceeding, if such filing is made under seal.
Confidentiality of Protected Data (a) Vendor acknowledges that the Protected Data it receives pursuant to the Master Agreement originates from the District and that this Protected Data belongs to and is owned by the District.
(b) Vendor will maintain the confidentiality of the Protected Data it receives in accordance with federal and state law (including but not limited to Section 2-d) and the District’s policy on data security and privacy. The District will provide Vendor with a copy of its policy on data security and privacy upon request.
Confidentiality and Data Protection We are a data controller for the information you provide to us including individual, identification and financial details, policy history and special category data (such as medical or criminal history). Details of our legal basis for processing your information, along with details of any third party recipient whom it may be necessary to share your personal data with in order to fulfil the contract, retention period for data held, security of your data, your rights under the UK General Data Protection Regulations (UK GDPR) including the right to complain can be found in our full ‘Privacy Notice’ attached to these terms of business and/or on our website at xxx.xxxxxxxxxxxxxxxx.xx.xx.
