Each of the parties hereto agrees to comply in all respects with applicable laws, directives, orders, statutes, ordinances and the like relating to trade secret information and non-public private information (NPPI), including without limitation, the Gramm-Leach-Bliley Act of 1999 and the regulations promulgated thereunder as well as the provisions of the European Union Privacy Directive. Each party agrees to direct any subcontractor, employee or other user who may be in a position to obtain any such private, non-public information to abide by the terms of this paragraph. Critical and confidential classified information such as company trade secrets, corporate emails, electronic technical private information, financials records, employees’ information and personal private information shall be protected according to commercially acceptable Information security practices, including but not limited to practices aligned with the Massachusetts law concerning personal information and Payment Card Industry Data Security Standards PCI DSS. Each party agrees to require any subcontractor, employee or other user who may be in a position to obtain any such private, non-public information of Employees to abide by the terms of this paragraph.

Personal information” shall include but not be limited to the person’s first and last name or first initial and last name, in conjunction with any of the following for that person: (a) social security number, (b) driver’s license number, (c) birth date information, (d) state ID number, (e) financial account number (e.g. bank and credit card numbers) (f) password, user ID or other information that would permit access to the person’s financial account or (g) biometric indicator (e.g. fingerprints). In the event of a data breach of SIRVA’s cardholder information involving Contractor or Contractor’s environment, Contractor will notify SIRVAwithin 24 hours of the identified breach and cooperate fully with SIRVA and/or industry and government officials in a review and/or forensic investigation of Contractor’s environment and/or processes.