Does the Learningrx franchise agreement specify which policies, procedures and controls the franchisee must comply with?

At the end of each year of the term of this Agreement, Franchisee must submit to Franchisor a certified statement listing and describing all performance-based lawsuits or potential claims threatened or actually filed against Franchisee, its owners, managers, employees or agents in connection with the operation of the Business, or if no such lawsuits or claims are threatened or filed during that year, a certified statement to that effect.

• 12.2 System Compliance. Franchisee must comply with the System, the Operations Manual, systems, procedures and forms, as in effect from time to time. All mandatory, specifications, standards, and operating procedures prescribed by Franchisor in the Operations Manual, or otherwise communicated to Franchisee in writing, shall constitute provisions of this Agreement as if fully set forth herein. Accordingly, all references in this Agreement to Franchisee's obligations under this Agreement, including to the Center, equipment, procedures, products and materials, shall include such mandatory specifications,

standards, and operating procedures. Franchisor reserves the right to require Franchisee to add additional products or concepts to the Business in the future, at Franchisee's expense.

• 12.3 Privacy Laws. In the operation of the LearningRx Franchised Business, Franchisee will receive "Customer Data." "Customer Data" is information, records, lists or data that contains "Personal Information." "Personal Information" includes information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, potential consumer, individual or household, as such term may be further defined or amended by applicable federal, state and local statutes, regulations, ordinances and requirements, including but not limited to, the California Consumer Privacy Act. Personal Information is collected, maintained or generated in the operation of the LearningRx Franchised Business, including through the use of a point of sale system.
  • (a) Franchisee agrees, at its sole cost and expense, to at all times:
• (b) comply with the data protection, collection, maintenance and use requirements for Customer Data set out in the Operations Manual and this Franchise Agreement, including all policies, procedures and controls that Franchisor implements now or in the future;
• (c) comply with all applicable federal, state and local statutes, regulations, ordinances and requirements, including but not limited to, the California Consumer Privacy Act, relating to the data protection, collection, maintenance and use of Customer Data (collectively, "Privacy Laws");
• (d) assist and otherwise cooperate with Franchisor to ensure Franchisor's and Franchisee's compliance with applicable Privacy Laws;
• (e) promptly notify Franchisor in writing of any Security Incident (defined below) that Franchisee becomes aware of or discovers. Franchisee will assist and otherwise cooperate with Franchisor to investigate any such Security Incident and will take all required steps, as determined by Franchisor, to remedy Franchisee's noncompliance with applicable Privacy Laws, this Agreement or the Operations Manual. For purposes of this Section 12.03, "Security Incident" means any actual or suspected accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data in violation of applicable Privacy Laws, this Agreement or the Operations Manual.
• (f) promptly provide Franchisor with the ability to delete, access or copy Customer Data in Franchisee's possession or control;
• (g) promptly notify Franchisor of any request regarding Customer Data received by the Franchisee from a "consumer" as defined by applicable Privacy Laws;
• (h) adopt policies, procedures, and controls, including those set out in the Operations Manual, if any, that enable Franchisee to respond, and to cause its agents and employees to respond, promptly to any rights request made pursuant to applicable Privacy Laws, including any disclosure request, deletion request, or opt-out request;

Source: Item 23 — RECEIPT (FDD pages 54–209)