What are 'Privacy Laws' as they pertain to an Embassy Suites franchise?
Embassy_Suites Franchise · 2025 FDDAnswer from 2025 FDD Document
“Privacy Laws” means any international, national, federal, provincial, state, or local law, code, rule or regulation that regulates the processing of Personal Information in any way, including data protection laws, laws regulating marketing communications and/or electronic communications, information security regulations and security breach notification rules.
10.5 Privacy and Data Protection. You will:
10.5.1 comply with all applicable Privacy Laws;
10.5.2 comply with all Standards that relate to Privacy Laws and the privacy and security of Personal Information;
10.5.3 refrain from any action or inaction that could cause us or our Affiliates to breach any Privacy Laws;
10.5.4 do and execute, or arrange to be done and executed, each act, document and thing we deem necessary in our business judgment to keep us and our Affiliates in compliance with the Privacy Laws; and
10.5.5 immediately report to us the theft or loss of Personal Information (other than the Personal Information of your own officers, directors, shareholders, employees or service providers).
Source: Item 22 — CONTRACTS (FDD page 97)
What This Means (2025 FDD)
According to Embassy Suites' 2025 Franchise Disclosure Document, 'Privacy Laws' encompass a broad range of regulations at various levels of government that govern the handling of personal information. These laws include any international, national, federal, provincial, state, or local law, code, rule, or regulation that regulates the processing of Personal Information in any way, including data protection laws, laws regulating marketing communications and/or electronic communications, information security regulations and security breach notification rules.
For a prospective Embassy Suites franchisee, this means they must comply with all applicable privacy laws in how they collect, use, store, and protect personal information. This includes data protection laws, marketing and electronic communication regulations, information security regulations, and rules regarding security breach notifications. The franchisee must also adhere to Embassy Suites' standards related to privacy laws and the security of personal information.
Furthermore, franchisees must avoid any actions that could cause Embassy Suites or its affiliates to violate privacy laws. They are also obligated to take necessary actions to ensure Embassy Suites remains compliant with these laws. A critical requirement is the immediate reporting of any theft or loss of personal information to Embassy Suites, excluding the personal information of the franchisee's own officers, directors, shareholders, employees, or service providers. This places a significant responsibility on the franchisee to maintain robust data protection measures and to promptly address any security incidents.