Orange County NC Website
DocuSign Envelope ID:A4C366A3-F5D9-473B-9218-AF49BCCA02E0 <br /> W1 I S <br /> will maintain commercially reasonable and appropriate security measures in order to <br /> protect sensitive information from unauthorized use or disclosure. Records you provide <br /> us will remain your property and will be returned to you upon request, although we will <br /> have the right to retain copies of such records to the extent required in the ordinary course <br /> of our business or by law. You will treat any information we provide to you, including <br /> data, recommendations, proposals, or reports, as confidential, and you will not disclose it <br /> to any third parties. You may disclose this information to the extent required to comply <br /> with applicable laws or regulations or the order of any court or tribunal. We retain the <br /> sole rights to all of our proprietary computer programs, systems, methods and procedures <br /> and to all files developed by us. <br /> Willis represents and warrants that, with respect to the personal information of any <br /> Massachusetts resident, (1) it has and is capable of maintaining appropriate security <br /> measures to protect Personal Information consistent with 201 CMR 17.00 and any <br /> applicable federal regulations; and (2) as of the Agreement Effective Date, it has and will <br /> at all times during the term of this Agreement, maintain a comprehensive written <br /> information security program that complies with applicable privacy and data security <br /> laws. Willis's information security program shall contain at least the following: <br /> • Reasonable restrictions upon physical access to records containing personal <br /> information and storage of such records and data in locked facilities, storage <br /> areas or counters. <br /> • Regular monitoring to ensure that the comprehensive information security <br /> program is operating in a manner reasonably calculated to prevent unauthorized <br /> access to or unauthorized use of personal information; and upgrading <br /> information safeguards as necessary to limit risks. <br /> • Reviewing the scope of the security measures at least annually or whenever <br /> there is a material change in business practices that may reasonably implicate <br /> the security or integrity of records containing personal information. <br /> • Documenting responsive actions taken in connection with any incident <br /> involving a breach of security, and mandatory post-incident review of events <br /> and actions taken, if any, to make changes in business practices related to <br /> protection of personal information. <br /> Carrier Quotes <br /> The quotes we have provided to you are based upon the information that you have <br /> provided to us. If you discover that previously submitted information is inaccurate or <br /> incomplete, please advise us immediately so that we can attempt to revalidate terms with <br /> insurers. <br /> US Retail Conditions Page 3 of 10 30 July 2014 <br />