Common use of Privacy of Personal Information Clause in Contracts

Privacy of Personal Information. (a) In the course of performance of this Agreement, ImmunoGen may acquire the Personal Information of individuals from various sources and countries. ImmunoGen will, and will cause its Affiliates and agents to, process all Personal Information it acquires under or in connection with this Agreement in compliance with all applicable data protection laws, including but not limited to the data protection laws of the European Union, European Economic Area, Switzerland, the United States and various localities therein. ImmunoGen acknowledges that the requirements under such data protection laws may exceed the requirements applicable to confidential information set forth in Section 6 hereof. Novartis may, on reasonable prior notice, audit ImmunoGen’s compliance with such data protection laws.