or products or services to a natural Person. Without limiting the foregoing, Personal Information includes any name, street address, telephone number, email address, identification
number issued by a Governmental Authority, credit card number, bank information, customer or account number, online identifier, device identifier, IP address, browsing history, search history, or other website, application, or online activity or
usage data, location data, biometric data, and medical or health information.
Privacy and Data Security
Requirements shall mean all (a) Privacy Laws; (b) applicable industry standards and rules of self-regulatory organizations, including the Payment Card Industry Data Security Standard, that are legally binding on the
Company or any of its Subsidiaries; (c) Company Privacy and Data Security Policies; and (d) contractual requirements concerning the privacy, security, or Processing of Personal Information or confidential information by the Company, any of
its Subsidiaries, or Subprocessors to which the Company or any of its Subsidiaries is a party or was or is otherwise bound.
Privacy Laws shall mean all applicable Laws concerning the privacy, security, or Processing of Personal
Information, including, as applicable, data breach notification Laws, consumer protection Laws, Laws concerning requirements for website and mobile application privacy policies and practices, Social Security number protection Laws, data security
Laws, Laws concerning health information privacy, Laws concerning biometric data, and Laws concerning email, text message, or telephone communications. Without limiting the foregoing, if applicable, Privacy Laws include: the Federal Trade Commission
Act, the Telephone Consumer Protection Act, the Telemarketing and Consumer Fraud and Abuse Prevention Act, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003, the
Childrens Online Privacy Protection Act, the California Consumer Privacy Act of 2018, the California Privacy Rights Act of 2020, the Confidentiality of Medical Information Act, the Computer Fraud and Abuse Act, the Electronic Communications
Privacy Act, the Fair Credit Reporting Act, the Fair and Accurate Credit Transaction Act, the Health Insurance Portability and Accountability Act of 1996 (as amended and supplemented by the Health Information Technology for Economic and Clinical
Health Act of the American Recovery and Reinvestment Act of 2009), the Gramm-Leach-Bliley Act (including all state Laws, rules, and regulations implementing or promulgated pursuant to Title V of the Gramm-Leach-Bliley Act), the Family Educational
Rights and Privacy Act, the European Union General Data Protection Regulation, the United Kingdom Data Protection Act 2018, the United Kingdom General Data Protection Regulation, and all other similar international, supranational, national, federal,
state, provincial, and local Laws, including all regulations and rules associated therewith and amendments thereto.
Process or Processing shall mean any operation performed on Personal Information or
confidential information, including the collection, creation, receipt, access, use, handling, compilation, analysis, monitoring, maintenance, retention, storage, transmission, transfer, protection, disclosure, distribution, destruction, or disposal
of Personal Information or confidential information.
Registered Intellectual Property Rights shall
mean (a) Patents, (b) Domain Names, (c) Trademarks and (d) Copyrights, in each case, that are the subject of an application, certificate, filing, registration, or other document issued by, filed with, or recorded by, any Governmental
Authority (or for Domain Names, any registrar) in any jurisdiction, but excluding any of the foregoing that have been abandoned by the Company or any of its Subsidiaries as of the date of this Agreement.
-15-