What level of privacy protection must a Del Taco franchisee's security procedures provide?

According to Del Taco's 2025 Franchise Disclosure Document, a franchisee must implement and maintain reasonable and appropriate security procedures and practices designed to protect personal information from unauthorized access, destruction, use, modification, or disclosure. These procedures and practices must provide the same level of privacy protection as required of Del Taco under any applicable Privacy Laws.

This means that a Del Taco franchisee is responsible for ensuring that the security measures they implement are at least as robust as those Del Taco itself is required to maintain under relevant privacy laws. This obligation extends to protecting personal information from a variety of threats, including unauthorized access, destruction, misuse, alteration, or disclosure. The franchisee must stay current with all applicable privacy laws to ensure their security measures meet the required standards.

In practical terms, a prospective Del Taco franchisee should carefully review the privacy laws applicable to their location and understand Del Taco's own privacy protection standards. They should also budget for the costs of implementing and maintaining these security procedures, which may include investments in technology, employee training, and ongoing monitoring. Failure to comply with these requirements could result in legal penalties and damage to the Del Taco brand's reputation.

It is important for potential franchisees to discuss these requirements with Del Taco during their due diligence process to fully understand the scope of their obligations and the resources needed to meet them. This will help ensure they are prepared to protect personal information and maintain compliance with privacy laws throughout the term of their franchise agreement.