Reasonable Security Procedures and Practices definition

Reasonable Security Procedures and Practices means data security procedures and practices developed, in good faith, and set forth in a written information security policy. “Personal information” means an individual’s first name or first initial and last name, personal mark, or unique biometric or genetic print or image, in combination with one or more of the following data elements:

Reasonable Security Procedures and Practices means data security procedures and practices developed, in good faith, and set forth in a written security policy.

Reasonable Security Procedures and Practices means and includes appropriate security measures for its operations that: (i) are in accordance with technological developments and evolving security needs; (ii) include administrative, technical and physical safeguards, including the use of secure and up-to-date encryption to protect Borrower Data and Protected Data while in transmission or storage; (iii) use reasonable precautions to protect the security, integrity, and confidentiality of the Borrower Data and Protected Data; (iv) protect against unauthorized access to or use of Borrower Data and Protected Data that could result in the destruction, use, modification or disclosure of Borrower Data and Protected Data, or substantial harm to Disclosing Party or any individual; and (v) comply with all Applicable Law, regulations, standards and industry best practices related to privacy and data security. Reasonable Security Procedures and Practices also includes establishing a computer network security policy, using reasonable methods of preventing unauthorized computer systems access, implementing administrative security controls (including in connection with any transfer, communication, remote access or storage of Borrower Data and Protected Data as permitted or required under this Agreement), installing computer network firewalls, protecting computer resources from insider abuse, having appropriate administrative procedures to restrict computer system access to Persons other than authorized users and is promptly withdrawn from terminated employees or other Persons who are no longer authorized, establishing a single point of contact for responses to security incidents, providing security and privacy training to employees and other personnel and monitoring the effectiveness of computer network security.