What must a Learningrx franchisee do if they become aware of a Security Incident?
Learningrx Franchise · 2025 FDDAnswer from 2025 FDD Document
- (e) promptly notify Franchisor in writing of any Security Incident (defined below) that Franchisee becomes aware of or discovers.
Franchisee will assist and otherwise cooperate with Franchisor to investigate any such Security Incident and will take all required steps, as determined by Franchisor, to remedy Franchisee's noncompliance with applicable Privacy Laws, this Agreement or the Operations Manual.
For purposes of this Section 12.03, "Security Incident" means any actual or suspected accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data in violation of applicable Privacy Laws, this Agreement or the Operations Manual.
(f) promptly provide Franchisor with the ability to delete, access or copy Customer Data in Franchisee's possession or control;
(g) promptly notify Franchisor of any request regarding Customer Data received by the Franchisee from a "consumer" as defined by applicable Privacy Laws;
Source: Item 23 — RECEIPT (FDD pages 54–209)
What This Means (2025 FDD)
According to Learningrx's 2025 Franchise Disclosure Document, a franchisee has specific obligations upon discovering a Security Incident. A "Security Incident" is defined as any actual or suspected accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data that violates Privacy Laws, the Franchise Agreement, or the Operations Manual.
Specifically, the Learningrx franchisee must promptly notify Learningrx in writing about any Security Incident they become aware of or discover. Furthermore, the franchisee is obligated to assist and cooperate with Learningrx in the investigation of any Security Incident. This includes taking all necessary steps determined by Learningrx to correct any noncompliance with Privacy Laws, the Franchise Agreement, or the Operations Manual.
In addition to reporting and assisting with investigations, the Learningrx franchisee must also promptly provide Learningrx with the ability to delete, access, or copy Customer Data in the franchisee's possession or control. They must also notify Learningrx of any requests regarding Customer Data received from a consumer as defined by applicable Privacy Laws. These requirements ensure that Learningrx can maintain data protection standards and respond appropriately to any data breaches or privacy concerns.