In the event of a Data Breach, does Cinnabon have the right to investigate the incident on the franchisee's Computer System?
Cinnabon Franchise · 2025 FDDAnswer from 2025 FDD Document
In the event of an actual or suspected Data Breach, you grant us and our designees and agents the right, exercisable in our sole and absolute discretion, to conduct an investigation of the incident and to install, run, and maintain any hardware, software, or code on your Computer System or in your computer network necessary or advisable to facilitate the investigation and to contain and remediate the incident, and you agree to cooperate with us and to provide us with any access and information we may reasonably request for those purposes.
Nothing in the preceding sentence shall relieve you of your obligation to comply with applicable laws, regulations, rules, standards or any equivalent thereof concerning an actual or suspected Data Breach.
You are responsible for any costs or financial losses you incur or remedial actions that you must take as a result of an actual or suspected Data Breach.
Source: Item 23 — Receipts (FDD pages 114–399)
What This Means (2025 FDD)
According to Cinnabon's 2025 Franchise Disclosure Document, in the event of an actual or suspected Data Breach, Cinnabon and its representatives have the right to investigate the incident. This right is exercisable at Cinnabon's sole discretion.
Specifically, Cinnabon can install, run, and maintain any hardware, software, or code on the franchisee's Computer System or network that is deemed necessary to facilitate the investigation, contain the incident, and remediate it. The franchisee is obligated to cooperate with Cinnabon and provide any access and information reasonably requested for these purposes.
It is important to note that this investigative right does not relieve the franchisee of their responsibility to comply with all applicable laws and regulations concerning data breaches. The franchisee remains responsible for any costs, financial losses, or remedial actions resulting from a data breach. This means that even while Cinnabon investigates, the franchisee must still adhere to legal requirements and bear the financial burden of the breach.