▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT Clause Samples

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. (“GLBA”). Supplier will, or is likely to, have access to, create, maintain, transmit and/or receive certain protected Customer Information in conjunction with the Services and/or products being provided under this Agreement. Various state departments of insurance have promulgated regulations regarding the safeguarding of certain Customer Information, as required by the federal ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act (“GLBA”). In conformity with such regulations, implementing the requirements set forth in the Administrative Simplification provisions of the ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act (the “Safeguard Rules”), the Parties have entered into a written agreement that meets the applicable requirements of the Safeguard Rules and such written agreement is attached hereto and made a part hereof as Exhibit B.

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT a. The Act was set up to protect the privacy of consumer information, and sets the standards for privacy notices, opt-out notices, and how nonpublic personal information can be used or disclosed. b. ▇▇▇▇▇://▇▇▇.▇▇▇.▇▇▇/tips-advice/business-center/privacy-and-security/▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇-act

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. Notwithstanding this Agreement or any other agreement to the contrary, it is understood and agreed that member and customer information obtained pursuant to this Agreement will be held in strict confidence and used only as necessary as contemplated by this Agreement and as permitted by applicable law in compliance with the ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act. Access to member and customer information will be limited to those employees and agents needing such information as contemplated by this Agreement and pursuant to reasonable business practices adopted to limit access and unauthorized disclosure of same or as permitted by applicable law. Member and customer information will be disclosed to non-Affiliated third parties only as necessary as contemplated by this Agreement or as permitted by applicable law. This provision shall survive termination of this Agreement.

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. If as part of the Agreement, the Contractor receives from WHEDA or otherwise obtains any “nonpublic personal information” as defined by the ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act (“Personal Information”), the following provisions shall apply: a. The Contractor shall safeguard and retain in confidence all Personal Information, and shall not publish, disclose or otherwise disseminate such Personal Information, or allow any third party to gain access to such Personal Information, without the prior written consent of ▇▇▇▇▇ or except as necessary in the performance of services under the Agreement. The Contractor shall only disclose Personal Information to its employees or agents who have a legitimate need to know such Personal Information for purposes of performing the service of the Contractor for WHEDA under the Agreement. b. The Contractor shall properly safeguard and dispose of all Personal Information. The Contractor agrees to institute appropriate internal procedures and controls, and to also conduct periodic employee training and other management oversight activities in order to assure that employees understand the requirements contained herein and are cognizant of the need to strictly comply with all of these measures. c. In the event the Contractor has a breach in its systems, processes and/or procedures which results in unauthorized access to Personal Information, the Contractor will immediately notify WHEDA. The Contractor, in conjunction with WHEDA, will take the appropriate actions, including but not limited to notifying potentially affected customers, in accordance with all applicable rules and regulations.

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. The Reinsurer agrees to protect the privacy of the Company's employees, Producers, Policyholders, licensors and contractors, all personal information relating to any such individual which may be shared with, or obtained by, the Reinsurer in its performance under this Agreement and the Reinsurance Agreements shall be considered confidential personal information. Therefore, the Reinsurer shall comply with all applicable provisions of the ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act with respect to this Agreement and the Reinsurance Agreements.

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. The Buyer will comply with the ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act (“GLB Act”) on and after the Closing Date with respect to the Contemplated Transactions and the customer information received from the Sellers, including, if applicable, responsibility for providing any notice required, and shall implement and maintain privacy practices consistent with Applicable Law to protect any financial information of the Sellers’ customers transferred by the Sellers to the Buyer. On and after the Closing Date, the Buyer shall bear full responsibility for providing any notice required under the GLB Act with respect to the Contemplated Transactions.

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. End User agrees that any Technical Provider used thereby shall be required to maintain a comprehensive information security program written in one or more readily accessible parts and that contains administrative, technical, and physical safeguards that are appropriate to Technical Provider’s size and complexity, the nature and scope of its activities, and the sensitivity of the Information provided to it hereunder. Such safeguards shall include the elements set forth in 12 C.F.R. § 1016.4 and shall be reasonably designed to: (i) insure the security and confidentiality of the Information provided by Reseller; (ii) protect against any anticipated threats or hazards to the security or integrity of such Information; and (iii) protect against unauthorized access to or use of such Information that could result in substantial harm or inconvenience to any consumer. End User further agrees that any Technical Provider used thereby shall be required to provide its security program to Reseller upon request and shall adopt any safeguard that Reseller may reasonably request; and, that such Technical Provider shall at a minimum be required to comply with Reseller’s standard access security requirements.

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. The Contractor shall comply with the Act by implementing and maintaining appropriate safeguards to protect and prevent unauthorized release of student, faculty and staff nonpublic information. Nonpublic information is defined as social security numbers, or financial transactions, bank, credit, and tax information. DocuSign Envelope ID: 6B877C2C-A080-4F33-95E4-912CEBC9012D

▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ ACT. (“GLBA”) Data Processing. This section documents the safeguard standards imposed to protect Client financial information subject to the ▇▇▇▇▇-▇▇▇▇▇ ▇▇▇▇▇▇ Act (“GLBA”). To the extent Provider’s services constitute processing of financial information governed by GLBA, these provisions shall apply.