Data Processing Agreements. With respect to each third Person that services, outsources, processes, or otherwise uses Personally Identifiable Information collected, held, or processed by or on behalf of the Company, the Company has in accordance with Privacy Laws entered into valid, binding an enforceable written data processing agreements with any such third party to (i) comply with applicable Privacy Requirements with respect to Personally Identifiable Information, (ii) act only in accordance with the instructions of the Company, (iii) take appropriate steps to protect and secure Personally Identifiable Information from data security incidents, (iv) restrict use of Personal Information to those authorized or required under the servicing, outsourcing, processing, or similar arrangement, and (v) certify or guarantee the return or adequate disposal or destruction of Personally Identifiable Information. The Company has disclosed to Buyer all such data processing agreements to which it is a party.
Appears in 3 contracts
Sources: Membership Interest Purchase Agreement (CarGurus, Inc.), Membership Interest Purchase Agreement (CarGurus, Inc.), Membership Interest Purchase Agreement (CarGurus, Inc.)