Common use of Limitations on Processing Clause in Contracts

Limitations on Processing. Comcast shall Process Company PI in accordance with Company’s written instructions. Comcast certifies that it understands and will comply with the restrictions of the DPA. Comcast and its Subprocessors shall, unless otherwise permitted by Privacy Law: 4.1 Only Process the Company PI for the Business Purposes described in the Processing Activity Table; 4.2 Not sell Company PI for valuable consideration or share Company PI for cross-context behavioral advertising; 4.3 Not Process Company PI outside the direct business relationship between Comcast and Company; 4.4 Not combine Company PI with Personal Information that it receives from or on behalf of another person or collects from its own interaction with the Data Subject, except in furtherance of the Business Purposes; 4.5 Implement reasonable security procedures and practices appropriate to the nature of the Company PI designed to protect from unauthorized or illegal Processing; 4.6 Promptly notify Company if it determines it can no longer meet its obligations under Privacy Law or the DPA; 4.7 Notify Company if, in Comcast’s opinion, Company’s instructions violate Privacy Law; and 4.8 Restrict access to Company PI to those authorized persons who need such information to fulfill the Business Purposes and ensure such authorized persons: (i) Process Company PI in accordance with the Agreement; (ii) are obligated to maintain the confidentiality of Company PI; (iii) are appropriately supervised; and (iv) are provided with appropriate training in the care and handling of Personal Information.