Common use of Security and IT Control and Related Policies related to Personal Information Clause in Contracts

Security and IT Control and Related Policies related to Personal Information. (a) Visa shall maintain and enforce security procedures concerning Personal Information, which procedures shall be (i) designed to protect the JPMC Personal Information from unauthorized access, including taking reasonable steps to avoid the corruption, loss or transmission to an unauthorized entity of data and to ensure the security of data during transmission and storage, including the use of data encryption techniques in accordance with industry standards, (B) at least as stringent as the most rigorous standard used to protect Personal Information for similar clients and (C) in compliance with Applicable Laws. Visa shall provide documentation of Visa’s and the Subcontractors’ security policies and practices and shall detail such policies and practices. (b) Visa shall ** inform JPMC of ** breaches in security, or attempted breaches in security, of which Visa becomes aware, including any corruption, loss or transmission to an unauthorized entity of Personal Information, or any breach of data security during transmission and storage. In the event of a security breach, Visa shall **. Visa shall use its best efforts to remedy any such breach, or attempted breach within **, and Visa shall cooperate fully, and shall cause Subcontractors to cooperate fully, ** and with ** civil or criminal authority in any investigation or action relating to such breach, or attempted breach.