factual

What laws must an Even Hotels hotel comply with regarding the Next-Gen Payments Solution?

Q: What laws must an Even Hotels hotel comply with regarding the Next-Gen Payments Solution?

"**Privacy Laws**" means (a) the Health Insurance Portability and Accountability Act of 1996, as amended ("**HIPAA**"); (b) Gramm-Leach-Bliley Act of 1999, as amended ("**GLB**"); (c) all applicable Laws and non-governmental standards protecting Personal Data (including Payment Card Industry Data Security Standard ("**PCI-DSS**") and Payment Application Data Security Standard ("**PA-DSS**")) in effect from time to time; (d) all Laws concerning the protection, transport, storage, use and processing of data (including the General Data Protection Regulation ((EU) 2016/679), as amended ("**GDPR** Source: Item 23 — RECEIPTS (FDD pages 99–438)

Even_Hotels Franchise · 2025 FDD

Answer from 2025 FDD Document

"Privacy Laws" means (a) the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA"); (b) Gramm-Leach-Bliley Act of 1999, as amended ("GLB"); (c) all applicable Laws and non-governmental standards protecting Personal Data (including Payment Card Industry Data Security Standard ("PCI-DSS") and Payment Application Data Security Standard ("PA-DSS")) in effect from time to time; (d) all Laws concerning the protection, transport, storage, use and processing of data (including the General Data Protection Regulation ((EU) 2016/679), as amended ("GDPR

Source: Item 23 — RECEIPTS (FDD pages 99–438)

What This Means (2025 FDD)

According to Even Hotels' 2025 Franchise Disclosure Document, the hotel must comply with Privacy Laws regarding the Next-Gen Payments Solution. These Privacy Laws include several specific acts and standards related to data protection.

The Privacy Laws encompass (a) the Health Insurance Portability and Accountability Act of 1996 (HIPAA), (b) the Gramm-Leach-Bliley Act of 1999 (GLB), and (c) all applicable laws and non-governmental standards protecting Personal Data, including the Payment Card Industry Data Security Standard (PCI-DSS) and Payment Application Data Security Standard (PA-DSS). Additionally, they include (d) all laws concerning the protection, transport, storage, use, and processing of data, such as the General Data Protection Regulation ((EU) 2016/679) (GDPR), along with any national implementing laws, regulations, and secondary legislation. Finally, (e) covers all applicable laws similar to those listed in subsections (a) through (d) or otherwise governing the transmission, storage, distribution, sale, or other use of Personal Data.

This means that as an Even Hotels franchisee, you must ensure that your hotel's operation of the Next-Gen Payments Solution adheres to a broad range of data protection and privacy regulations. Failure to comply with these laws could result in significant penalties and legal repercussions. It is important to stay updated on the latest amendments and changes to these laws to maintain compliance.

Disclaimer: This information is extracted from the 2025 Franchise Disclosure Document and is provided for research purposes only. It does not constitute legal or financial advice. Consult with a franchise attorney before making any investment decisions.

All Even_Hotels 2025 FAQs Ask FDD Ninja