What policies, procedures, and controls must a Learningrx franchisee adopt to respond to rights requests under Privacy Laws?
Learningrx Franchise · 2025 FDDAnswer from 2025 FDD Document
(h) adopt policies, procedures, and controls, including those set out in the Operations Manual, if any, that enable Franchisee to respond, and to cause its agents and employees to respond, promptly to any rights request made pursuant to applicable Privacy Laws, including any disclosure request, deletion request, or opt-out request;
(i) adopt policies, procedures, and controls, including those set out in the Operations Manual, if any, that limit access to Customer Data to only those employees that have a need-to-know basis based on specific job function or role.
Franchisee will provide data privacy and security training to employees who have access to Customer Data or who operate or have access to system controls and will require employees to adhere to data confidentiality terms providing for the protection of Customer Data in accordance with this Agreement and the Operations Manual;
Source: Item 23 — RECEIPT (FDD pages 54–209)
What This Means (2025 FDD)
According to the 2025 Learningrx Franchise Disclosure Document, franchisees must adopt specific policies, procedures, and controls to comply with Privacy Laws regarding customer data. These measures must enable the franchisee and their agents/employees to promptly respond to any rights request made pursuant to applicable Privacy Laws. This includes disclosure, deletion, and opt-out requests. These policies, procedures, and controls may be further detailed in the Learningrx Operations Manual.
In addition to adopting these measures, Learningrx franchisees must also implement policies, procedures, and controls that limit access to Customer Data. Access should be restricted to employees with a specific need-to-know based on their job function or role. Furthermore, franchisees are required to provide data privacy and security training to employees who handle Customer Data or have access to system controls. These employees must also adhere to data confidentiality terms that protect Customer Data, as outlined in the Franchise Agreement and Operations Manual.
These requirements ensure that Learningrx franchisees handle customer data responsibly and in compliance with applicable privacy regulations. By implementing these policies, Learningrx aims to protect consumer privacy and maintain the integrity of its data management practices across all franchise locations. A prospective franchisee should carefully review the Operations Manual and Franchise Agreement to fully understand their obligations and the specific policies and procedures they must implement.