What must a Dq Treat licensee do if they suspect a data breach at or in connection with the restaurant?

According to the 2025 Dq Treat FDD, a licensee must immediately notify Dq Treat of any suspected data breach at or in connection with the restaurant. This requirement is part of the licensee's broader obligation to comply with all privacy policies, data protection and security, and breach response policies established by Dq Treat.

This immediate notification requirement ensures that Dq Treat can promptly take steps to assess and contain the breach, mitigate potential damage, and comply with applicable data breach notification laws. Data breaches can have significant financial and reputational consequences for both the franchisee and the franchisor, making swift action critical.

For a prospective Dq Treat franchisee, this means being prepared to act quickly and decisively in the event of a suspected data breach. It also highlights the importance of understanding and adhering to Dq Treat's data protection and security policies, as well as implementing appropriate security measures to prevent breaches from occurring in the first place. Franchisees should ensure their staff are trained on data security protocols and understand the importance of reporting any suspicious activity immediately.