What is City Wide franchisee's obligation to assist and cooperate with the franchisor regarding compliance with applicable Privacy Laws?

Franchisee agrees, at its sole cost and expense, to always:

7.34.1 comply with the data protection, collection, maintenance and use requirements for Customer Data set out in the Operating Manual and this Franchise Agreement, including all policies, procedures and controls that Franchisor implements now or in the future.

• 7.34.2 comply with all applicable federal, state and local statutes, regulations, ordinances and requirements, including but not limited to, the California Consumer Privacy Act, relating to the data protection, collection, maintenance and use of Customer Data (collectively, "Privacy Laws");

• 7.34.3 assist and otherwise cooperate with Franchisor to ensure Franchisor's and Franchisee's compliance with applicable Privacy Laws.

• 7.34.4 promptly notify Franchisor in writing of any Security Incident (defined below) that Franchisee becomes aware of or discovers.

Franchisee will assist and otherwise cooperate with Franchisor to investigate any such Security Incident and will take all required steps, as determined by Franchisor, to remedy Franchisee's noncompliance with applicable Privacy Laws, this Agreement, or the Operating Manual.

For purposes of this Section 7.34.4, "Security Incident" means any actual or suspected accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data in violation of applicable Privacy Laws, this Agreement or the Operating Manual.

• 7.34.5 promptly provide Franchisor with the ability to delete, access or copy Customer Data in Franchisee's possession or control.

• 7.34.6 promptly notify Franchisor of any request regarding Customer Data received by Franchisee from a "consumer" as defined by applicable Privacy Laws.

• 7.34.7 adopt policies, procedures, and controls, including those set out in the Operating Manual, if any, that enable Franchisee to respond, and to cause its agents and employees to respond, promptly to any rights request made pursuant to applicable Privacy Laws, including any disclosure request, deletion request, or opt-out request.

• 7.34.8 adopt policies, procedures, and controls, including those set out in the Operating Manual, if any, that limit access to Customer Data to only those employees that have a need-to-know basis based on specific job function or role.

Franchisee will provide data privacy and security training to employees who have access to Customer Data or who operate or have access to system controls and will require employees to adhere to data confidentiality terms providing for the protection of Customer Data in accordance with this Agreement and the Operating Manual; and

• 7.34.9 maintain Customer Data in confidence in accordance with Section 9 of this Franchise Agreement.

Source: Item 22 — CONTRACTS (FDD page 65)