Common use of Virginia Clause in Contracts

Virginia. If the First Party has determined that the Consumer is a resident of Virginia, the Service Provider shall: (i) ensure that each person processing the Personal Information is subject to a duty of confidentiality with respect to such information; (ii) at the First Party’s direction, delete or return all Personal Information to the First Party as requested at the end of the provision of services, unless retention of such information is required by applicable law; (iii) upon the reasonable request of the First Party, make available to the First Party all information in its possession necessary to demonstrate the Service Provider’s compliance with the obligations set forth in this Agreement and the VCDPA; (iv) allow, and cooperate with, reasonable assessments by the First Party or the First Party’s designated assessor; alternatively, the Service Provider may arrange for a qualified and independent assessor to conduct an assessment of the Service Provider’s policies and technical and organizational measures in support of the obligations under this Section using an appropriate and accepted control standard or framework and assessment procedure for such assessments. The Service Provider shall provide a report of such assessment to the First Party upon request; and (v) engage any Service Provider or Subprovider pursuant to a written contract in accordance with Section 8.4 that requires the Subprovider to meet the obligations of the Service Provider with respect to the Personal Information being Processed.

Virginia. If the First Party has determined that the Consumer is a resident of Virginia, the Service Provider shall: (i) ensure that each person Person processing the Personal Information is subject to a duty of confidentiality with respect to such information; (ii) at the First Party’s direction, delete or return all Personal Information to the First Party as requested at the end of the provision of services, unless retention of such information is required by applicable law; (iii) upon the reasonable request of the First Party, make available to the First Party all information in its possession necessary to demonstrate the Service Provider’s compliance with the obligations set forth in this Agreement and the VCDPAVirginia Act; (iv) allow, and cooperate with, reasonable assessments by the First Party or the First Party’s designated assessor; alternatively, the Service Provider may arrange for a qualified and independent assessor to conduct an assessment of the Service Provider’s policies and technical and organizational measures in support of the obligations under this Section using an appropriate and accepted control standard or framework and assessment procedure for such assessments. The Service Provider shall provide a report of such assessment to the First Party upon request; and (v) engage any Service Provider or Subprovider pursuant to a written contract in accordance with Section 8.4 8.3 that requires the Subprovider to meet the obligations of the Service Provider with respect to the Personal Information being Processed.