California Service Provider Commitments
If ISN Software Corporation (or its applicable affiliate, "ISN") will receive Personal Information from or on behalf of a Subscriber to ISNetworld ("Subscriber") for processing by ISN as a Service Provider that is covered by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively and including applicable regulations and interpretations, the "CCPA"), then ISN agrees to protect such Personal Information in accordance with these California Service Provider Commitments ("Commitments"). For purposes of these Commitments, (1) the terms Service Provider and Personal Information have the meanings given to them in the CCPA, and (2) the term Subscriber Personal Information shall mean Personal Information concerning individual persons that are employees of Subscriber and for which processing is covered by the CCPA. To the extent required by the CCPA, these Commitments will form part of the agreement pursuant to which Subscriber subscribes to ISNetworld (the "Agreement").
1. CCPA Compliance
In connection with its processing of Subscriber Personal Information, ISN will (a) only process Subscriber Personal Information in connection with providing the services associated with Subscriber's ISNetworld subscription (the "Services"), and (b) comply with CCPA, and (c) provide the same level of privacy protection as is required by the CCPA.
2. CCPA Limitations
ISN certifies its understanding that except in connection with providing the Services or as otherwise permitted by the CCPA, it is restricted from:
a. Selling or sharing (each as defined in the CCPA) Subsriber Personal Information to a third party;
b. retaining, using, or disclosing the Subscriber Personal Information (i) for any purpose other than the business purposes specified in the Agreement, and (ii) outside the direct business relationship between ISN and Subscriber; and
c. combining Subscriber Personal Information ISN receives pursuant to the Agreement with Personal Information that it receives from or on behalf of another person or persons or collects from its own interaction with the individual.
3. Notice and Remediation
ISN will notify Subscriber if ISN determines that ISN can no longer meet its obligations under CCPA relating to Subscriber Personal Information. Subscriber may, upon written notice to ISN, take reasonable and appropriate steps to stop and remediate unauthorized use of Subscriber Personal Information.
4. Reasonable Assurances
To the extent required by the CCPA, Subscriber may take reasonable and appropriate steps to ensure ISN complies with the CCPA with respect to Subscriber Personal Information, including, (a) upon written request, the right to receive from ISN appropriate documentation and assurances of compliance, and (b) the unilateral right to terminate the Agreement.
5. Sub-Processors
ISN maintains, and will maintain during the term of the Agreement, a list of sub-processors that may process Personal Information in connection with providing the Services (which list is and will be available through Subscriber's ISNetworld account). ISN will promptly update such list to include new, and remove old, sub-processors that may process Subscriber Personal Information in connection with providing the Services.
6. Modifications
ISN may modify these Commitments from time to time to maintain compliance with the CCPA or for other business purposes. To the extent required by the CCPA, ISN will conspicuously post notice of such modifications in ISNetworld or otherwise notify Subscriber and such modifications will be deemed effective thirty (30) days after such notice.