In the Crowne Plaza agreement, what does each party represent and warrant regarding the collection, access, or processing of personal information?
Crowne_Plaza Franchise · 2025 FDDAnswer from 2025 FDD Document
To the extent that either party collects, accesses, or processes the Personal Information (as defined below) of consumers in connection with the performance of this Agreement, each party represents and warrants that it shall comply with (i) all applicable international, federal, state, provincial and local laws, rules, regulations, directives and governmental requirements currently in effect and as they become effective relating in any way to the privacy, confidentiality, and/or security of protected personal information, as defined by applicable law (referred to herein as "Personal Information"), including, but not limited to, data protected under applicable state and federal data privacy law(s) and the California Consumer Privacy Act, as
amended or replaced from time to time; (ii) all applicable industry standards concerning privacy, data protection, confidentiality or information security including, if applicable, the Payment Card Industry Data Security Standard ("PCI DSS"); and (iii) applicable provisions of each party's respective written requirements, currently in effect and as they become effective relating in any way to the privacy, confidentiality, and/or security of Personal Information or applicable privacy policies, statements or notices (collectively, "Privacy and Security Requirements").
Source: Item 23 — Receipts (FDD pages 100–424)
What This Means (2025 FDD)
According to Crowne Plaza's 2025 Franchise Disclosure Document, both parties involved in the franchise agreement have specific responsibilities when handling personal information. Each party must adhere to all international, federal, state, provincial, and local laws, rules, and regulations concerning the privacy, confidentiality, and security of protected personal information. This includes compliance with data privacy laws like the California Consumer Privacy Act.
Furthermore, both Crowne Plaza and the franchisee must follow all applicable industry standards related to privacy, data protection, confidentiality, and information security. If applicable, this includes adhering to the Payment Card Industry Data Security Standard (PCI DSS). They must also comply with the provisions of their respective written requirements, privacy policies, statements, or notices that relate to the privacy, confidentiality, and security of personal information.
In practical terms, this means a Crowne Plaza franchisee must implement and maintain robust systems and practices to safeguard consumer data. This includes staying updated on evolving privacy laws and industry standards, training employees on data protection, and ensuring that all data processing activities comply with these requirements. Failure to comply could result in legal penalties, damage to the Crowne Plaza brand's reputation, and loss of customer trust.