Requests for Data Access Clause Samples

Requests for Data Access. If Supplier collects CCPA Personal Information on behalf of AT&T in accordance with this Agreement, AT&T reserves the right to require Supplier to provide to AT&T all the CCPA Personal Information collected, at any time, in AT&T’s sole discretion (a “Data Access Request”). Data Access Requests will be provided to Supplier in writing and will identify individual(s) or household(s) whose information Supplier must provide to AT&T. Supplier will have [***] to comply with a Data Access Request by providing the information requested to AT&T. Supplier must maintain complete and accurate records relating to its compliance with each Data Access Request. AT&T and its auditors will have the right to review Supplier’s compliance with any Data Access Request (“Data Access Audit”). AT&T Audits will apply to Data Access Audits. For a Data Access Audit, Supplier must provide AT&T access at all reasonable times to the records relating to Data Access Requests; systems used to access information identified in the requests; and employees and contractors who facilitated compliance with Data Access Requests. AT&T reserves the right to require Supplier to delete all CCPA Personal Information associated with an individual or household at any time, in AT&T’s sole discretion (a “Data Deletion Request”). Data Deletion Requests will be provided to Supplier in writing and will identify individual(s) or household(s) whose information must be deleted. Supplier will have [***] to comply with a Data Deletion Request by (a) deleting the data identified and (b) providing written confirmation to AT&T. If Supplier is required by law to retain information that is subject to a Data Deletion Request or determines it must retain information to provide the Services specified in this Agreement, it will so advise AT&T in writing within [***], and AT&T will provide further direction. Supplier must maintain complete and accurate records relating to its compliance with each Data Deletion Request (which records must not include data that was required to be deleted). AT&T and its auditors have the right to review Supplier’s compliance with any Data Deletion Request (“Data Deletion Audit”). AT&T Audits apply to Data Deletion Audits. For a Data Deletion Audit, Supplier must provide AT&T access at all reasonable times to the records relating to Data Deletion Requests; systems used to delete information identified in the requests; and employees and contractors who facilitated compliance with Data Deletion Re...