客戶信息中英文保密協(xié)議協(xié)議編號(hào)：________________本客戶信息中英文保密協(xié)議（以下簡(jiǎn)稱“本協(xié)議”）由以下雙方（以下合稱“雙方”，單稱“一方”）本著平等自愿、公平誠(chéng)信、權(quán)責(zé)統(tǒng)一的原則，于____年____月____日在____（簽署地）自愿簽署，以明確雙方在客戶信息處理過(guò)程中的保密權(quán)利與義務(wù)，保障客戶信息安全及雙方合法權(quán)益，恪守相關(guān)法律法規(guī)規(guī)定。甲方（信息提供方）：____________________________________統(tǒng)一社會(huì)信用代碼/注冊(cè)號(hào)：__________________________注冊(cè)地址/主要經(jīng)營(yíng)場(chǎng)所：____________________________法定代表人/主要負(fù)責(zé)人：____________________________聯(lián)系電話：________________________電子郵箱：________________________乙方（信息接收方）：____________________________________統(tǒng)一社會(huì)信用代碼/注冊(cè)號(hào)：__________________________注冊(cè)地址/主要經(jīng)營(yíng)場(chǎng)所：____________________________法定代表人/主要負(fù)責(zé)人：____________________________聯(lián)系電話：________________________電子郵箱：________________________鑒于：1.甲方在日常經(jīng)營(yíng)活動(dòng)中，合法收集、存儲(chǔ)、管理并使用大量客戶信息，該等客戶信息是甲方核心商業(yè)資源，對(duì)甲方經(jīng)營(yíng)發(fā)展具有重要戰(zhàn)略意義；2.乙方因____（明確合作/服務(wù)事項(xiàng)，如：為甲方提供客戶服務(wù)外包、信息技術(shù)支持、市場(chǎng)調(diào)研、供應(yīng)鏈協(xié)作等）之必要，需接觸、使用甲方部分客戶信息；3.雙方均確認(rèn)，客戶信息的安全與保密關(guān)乎客戶隱私權(quán)及雙方商業(yè)信譽(yù)，任何一方違反保密義務(wù)均會(huì)給對(duì)方造成重大損失。為規(guī)范客戶信息的使用與管理，防范信息泄露、濫用、篡改等風(fēng)險(xiǎn)，依據(jù)《中華人民共和國(guó)民法典》《中華人民共和國(guó)個(gè)人信息保護(hù)法》《中華人民共和國(guó)數(shù)據(jù)安全法》《中華人民共和國(guó)反不正當(dāng)競(jìng)爭(zhēng)法》等相關(guān)法律法規(guī)，雙方經(jīng)充分協(xié)商，達(dá)成如下協(xié)議，以資共同信守。特別約定：本協(xié)議包含中文和英文兩個(gè)版本，兩個(gè)版本內(nèi)容具有同等法律效力。如兩個(gè)版本在文字表述上存在不一致之處，以中文版本為準(zhǔn)。雙方均已通讀并理解兩個(gè)版本的全部條款，對(duì)條款內(nèi)容無(wú)任何異議。第一部分中文條款第一條定義與范圍1.1客戶信息：指甲方合法擁有或有權(quán)處置的，與甲方客戶（包括自然人客戶、法人客戶及非法人組織客戶）相關(guān)的全部信息及衍生資料，無(wú)論以何種形式（書(shū)面、電子、口頭、影像、實(shí)物等）存在，具體包括但不限于：（1）自然人客戶信息：姓名、性別、出生日期、身份證號(hào)、護(hù)照號(hào)、聯(lián)系方式（電話、短信、郵箱、通訊地址等）、銀行賬戶信息、支付記錄、消費(fèi)偏好、健康信息、身份驗(yàn)證信息、業(yè)務(wù)辦理記錄及其他能夠識(shí)別該自然人客戶身份或反映其活動(dòng)情況的信息；（2）法人/非法人組織客戶信息：客戶名稱、統(tǒng)一社會(huì)信用代碼/注冊(cè)號(hào)、注冊(cè)地址、經(jīng)營(yíng)地址、聯(lián)系方式、法定代表人/負(fù)責(zé)人信息、經(jīng)辦人信息、業(yè)務(wù)合作協(xié)議、采購(gòu)清單、供貨記錄、財(cái)務(wù)往來(lái)數(shù)據(jù)、商業(yè)計(jì)劃、技術(shù)需求、客戶上下游資源及其他與該客戶經(jīng)營(yíng)活動(dòng)相關(guān)的核心信息；（3）經(jīng)甲方標(biāo)注為保密或乙方在接收時(shí)已知/應(yīng)知具有保密性質(zhì)的其他與客戶相關(guān)的信息資料。1.2信息提供方：指本協(xié)議項(xiàng)下向另一方提供客戶信息的主體，即本協(xié)議甲方。1.3信息接收方：指本協(xié)議項(xiàng)下接收并使用客戶信息的主體，即本協(xié)議乙方。1.4授權(quán)使用人：指乙方為履行本協(xié)議約定事項(xiàng)，經(jīng)乙方書(shū)面授權(quán)并明確告知本協(xié)議保密義務(wù)，且與乙方存在勞動(dòng)、勞務(wù)或委托關(guān)系的人員（包括乙方員工、兼職人員、外包人員、顧問(wèn)等）。1.5第三方：指除甲乙雙方及乙方授權(quán)使用人以外的任何自然人、法人、非法人組織、政府機(jī)關(guān)或其他主體。1.6保密義務(wù)：指信息接收方及其中授權(quán)使用人對(duì)接收的客戶信息所承擔(dān)的不得擅自披露、泄露、傳播、轉(zhuǎn)讓、使用、篡改、銷毀或用于本協(xié)議約定以外目的的義務(wù)。第二條保密義務(wù)的內(nèi)容2.1乙方承諾，對(duì)其通過(guò)本協(xié)議約定的合作/服務(wù)事項(xiàng)，從甲方處獲取的全部客戶信息，承擔(dān)嚴(yán)格的保密義務(wù)，未經(jīng)甲方事先書(shū)面同意，不得實(shí)施下列行為：（1）向任何第三方披露、泄露、傳播、轉(zhuǎn)讓、贈(zèng)與、出租、出借客戶信息，包括但不限于向乙方關(guān)聯(lián)方、非授權(quán)人員、合作伙伴等傳遞客戶信息；（2）將客戶信息用于本協(xié)議約定的合作/服務(wù)事項(xiàng)以外的任何商業(yè)或非商業(yè)目的，包括但不限于用于乙方自身業(yè)務(wù)推廣、客戶開(kāi)發(fā)、學(xué)術(shù)研究、數(shù)據(jù)加工等；（3）對(duì)客戶信息進(jìn)行擅自復(fù)制、修改、編輯、拆解、提取、匯編、反向工程、格式化或其他任何形式的加工改造，不得將客戶信息與乙方自有信息或第三方信息進(jìn)行非法融合、匹配；（4）允許任何第三方接觸、訪問(wèn)客戶信息或獲取客戶信息的副本、摘錄件，不得為第三方獲取客戶信息提供任何便利條件；（5）丟棄、損毀含有客戶信息的載體（包括但不限于紙質(zhì)文件、硬盤、U盤、光盤、移動(dòng)設(shè)備等），或未采取安全防護(hù)措施導(dǎo)致客戶信息泄露的其他行為。2.2乙方應(yīng)建立健全客戶信息保密管理體系及安全防護(hù)機(jī)制，采取與客戶信息敏感性、重要性相匹配的技術(shù)措施和管理措施，確?？蛻粜畔踩?，具體包括但不限于：（1）建立客戶信息分級(jí)分類管理制度，對(duì)高度敏感客戶信息（如自然人客戶身份證號(hào)、銀行賬戶信息、健康信息等）采取加密存儲(chǔ)、雙重授權(quán)訪問(wèn)、專人專管、動(dòng)態(tài)監(jiān)控等強(qiáng)化防護(hù)措施；（2）嚴(yán)格控制客戶信息的訪問(wèn)權(quán)限，僅向確有必要接觸客戶信息的授權(quán)使用人開(kāi)放，為每位授權(quán)使用人建立獨(dú)立的訪問(wèn)賬號(hào)、密碼及操作日志，日志留存期限不低于本協(xié)議保密期限屆滿后2年，定期對(duì)訪問(wèn)權(quán)限進(jìn)行核查與清理；（3）定期對(duì)授權(quán)使用人開(kāi)展客戶信息保密培訓(xùn)、法律法規(guī)培訓(xùn)及安全操作培訓(xùn)，告知其保密義務(wù)、違約后果及應(yīng)急處置流程，并與每位授權(quán)使用人簽訂書(shū)面保密承諾書(shū)，留存培訓(xùn)記錄及承諾書(shū)原件；（4）對(duì)電子形式的客戶信息，采取防病毒入侵、防黑客攻擊、數(shù)據(jù)加密、數(shù)據(jù)備份、異常行為監(jiān)測(cè)、訪問(wèn)痕跡追溯等技術(shù)防護(hù)措施，定期開(kāi)展安全漏洞檢測(cè)與修復(fù)，確保存儲(chǔ)系統(tǒng)、傳輸渠道的安全；（5）對(duì)書(shū)面形式的客戶信息，采取專柜存放、加鎖保管、借閱登記、使用后及時(shí)回收、作廢文件不可逆銷毀（如粉碎、焚燒等）等管理措施，留存借閱記錄及銷毀記錄；（6）建立客戶信息泄露應(yīng)急處置機(jī)制，一旦發(fā)現(xiàn)客戶信息泄露、丟失、損毀等情況，應(yīng)立即采取補(bǔ)救措施（包括但不限于停止泄露、回收信息、消除影響等），并在24小時(shí)內(nèi)書(shū)面通知甲方，配合甲方及相關(guān)部門開(kāi)展調(diào)查處置工作。2.3乙方應(yīng)對(duì)其授權(quán)使用人的行為承擔(dān)連帶保密責(zé)任。若乙方授權(quán)使用人違反本協(xié)議保密義務(wù)，乙方應(yīng)立即制止其行為，采取有效補(bǔ)救措施，并承擔(dān)由此給甲方及客戶造成的全部損失，甲方有權(quán)單方解除本協(xié)議及雙方相關(guān)合作協(xié)議。2.4乙方承諾，在使用客戶信息過(guò)程中，嚴(yán)格遵守《中華人民共和國(guó)個(gè)人信息保護(hù)法》等相關(guān)法律法規(guī)的規(guī)定，尊重客戶的隱私權(quán)、知情權(quán)、更正權(quán)、刪除權(quán)等合法權(quán)益，不得非法收集、使用、加工、傳輸、提供、公開(kāi)客戶信息，不得侵害客戶的合法權(quán)益。若因乙方違規(guī)使用客戶信息導(dǎo)致客戶投訴、索賠、仲裁、訴訟或監(jiān)管部門處罰的，全部責(zé)任由乙方承擔(dān)，甲方因此遭受損失的，乙方應(yīng)全額賠償。第三條保密義務(wù)的例外情形乙方在下列情形下披露、使用客戶信息的，不視為違反本協(xié)議約定，但應(yīng)履行相應(yīng)的通知及配合義務(wù)：3.1該客戶信息已通過(guò)合法途徑完全公開(kāi)，且公開(kāi)并非因乙方或其授權(quán)使用人的違約行為導(dǎo)致；3.2乙方按照法律法規(guī)、司法機(jī)關(guān)、仲裁機(jī)構(gòu)或行政監(jiān)管部門的強(qiáng)制性要求（包括但不限于傳票、裁定、決定等）進(jìn)行披露的，應(yīng)在披露前盡可能提前3個(gè)工作日書(shū)面通知甲方（法律法規(guī)或相關(guān)機(jī)關(guān)禁止通知的除外），并配合甲方采取合理措施縮小披露范圍、降低信息泄露風(fēng)險(xiǎn)，留存相關(guān)通知及配合記錄；3.3該客戶信息是乙方在接收甲方披露前，已通過(guò)合法途徑獨(dú)立獲取且無(wú)保密義務(wù)的，乙方應(yīng)提供充分證據(jù)證明其獲取途徑的合法性及無(wú)保密義務(wù)的事實(shí)；3.4乙方從有權(quán)披露該客戶信息的第三方處合法獲取，且該第三方對(duì)該信息無(wú)保密義務(wù)的，乙方應(yīng)在獲取前確認(rèn)第三方的披露權(quán)限，并留存相關(guān)證明文件；3.5乙方為維護(hù)自身合法權(quán)益（如應(yīng)對(duì)訴訟、仲裁、行政處罰、債務(wù)追償?shù)龋?，在必要范圍?nèi)向其律師、會(huì)計(jì)師等專業(yè)顧問(wèn)披露的，應(yīng)確保該等專業(yè)顧問(wèn)承擔(dān)與本協(xié)議同等嚴(yán)格的保密義務(wù)，并對(duì)專業(yè)顧問(wèn)的行為承擔(dān)連帶責(zé)任，留存專業(yè)顧問(wèn)的保密承諾文件。第四條保密期限4.1本協(xié)議項(xiàng)下的保密義務(wù)自乙方接收客戶信息之日起生效，有效期至下列情形之一發(fā)生之日止（以較晚發(fā)生者為準(zhǔn)）：（1）該客戶信息通過(guò)合法途徑完全公開(kāi)；（2）本協(xié)議約定的保密期限屆滿；（3）甲方書(shū)面通知乙方解除其對(duì)特定客戶信息的保密義務(wù)（該通知不得違反法律法規(guī)及客戶權(quán)益保護(hù)要求，且需提前15個(gè)工作日書(shū)面送達(dá)乙方）。4.2本協(xié)議約定的保密期限：（1）通用客戶信息（如客戶名稱、公開(kāi)聯(lián)系方式等非敏感信息）的保密期限，自本協(xié)議生效之日起至雙方合作/服務(wù)事項(xiàng)終止后3年；（2）敏感客戶信息（包括但不限于自然人客戶身份證號(hào)、銀行賬戶信息、健康信息，法人客戶核心商業(yè)秘密、財(cái)務(wù)數(shù)據(jù)等）的保密期限，自乙方接收該信息之日起至該信息公開(kāi)后5年；若該信息始終未公開(kāi)，保密期限持續(xù)有效，乙方需終身承擔(dān)保密義務(wù)。4.3本協(xié)議的終止、解除、無(wú)效或被撤銷，不影響乙方對(duì)其已接收的客戶信息承擔(dān)的保密義務(wù)，該保密義務(wù)持續(xù)至本協(xié)議約定的保密期限屆滿為止。第五條客戶信息的返還與銷毀5.1本協(xié)議終止、解除或雙方合作/服務(wù)事項(xiàng)完成后，或甲方書(shū)面要求乙方返還、銷毀客戶信息的，乙方應(yīng)在收到甲方書(shū)面通知之日起5個(gè)工作日內(nèi)，完成下列事項(xiàng)：（1）將其持有的全部客戶信息原件、復(fù)印件、復(fù)制件、加工件、衍生資料及存儲(chǔ)客戶信息的載體（包括但不限于紙質(zhì)文件、硬盤、U盤、光盤、移動(dòng)設(shè)備、服務(wù)器備份等）全部返還給甲方，并出具客戶信息返還清單，清單應(yīng)明確信息名稱、數(shù)量、形式、載體類型等內(nèi)容，經(jīng)甲方核對(duì)確認(rèn)后簽字蓋章；（2）對(duì)無(wú)法返還的客戶信息（如已存儲(chǔ)于乙方系統(tǒng)中的電子數(shù)據(jù)、已融入業(yè)務(wù)流程的信息片段等），應(yīng)按照甲方書(shū)面要求采取不可逆的銷毀方式進(jìn)行徹底銷毀，確保信息無(wú)法恢復(fù)，并出具客戶信息銷毀確認(rèn)函，函件應(yīng)載明銷毀信息的名稱、數(shù)量、形式、銷毀方式、銷毀時(shí)間、經(jīng)辦人等內(nèi)容，同時(shí)留存銷毀過(guò)程記錄（如照片、視頻、日志等）及相關(guān)證據(jù)，供甲方核查；（3）乙方授權(quán)使用人持有的客戶信息及相關(guān)載體，由乙方負(fù)責(zé)回收并按照本條約定返還或銷毀，確保無(wú)任何形式的客戶信息留存。5.2乙方確認(rèn)，客戶信息返還或銷毀后，其不再持有、留存任何形式的客戶信息，也不會(huì)通過(guò)記憶、備份、截圖、復(fù)制、轉(zhuǎn)錄等任何方式留存、恢復(fù)或使用客戶信息。若乙方違反本條約定，導(dǎo)致客戶信息泄露或?yàn)E用的，應(yīng)承擔(dān)由此給甲方及客戶造成的全部損失。第六條違約責(zé)任6.1若乙方違反本協(xié)議第二條、第四條、第五條約定的義務(wù)，甲方有權(quán)采取下列一項(xiàng)或多項(xiàng)措施：（1）要求乙方立即停止違約行為，采取補(bǔ)救措施（包括但不限于返還或銷毀客戶信息、消除影響、向客戶道歉、承擔(dān)客戶索賠等）；（2）解除本協(xié)議及雙方基于合作/服務(wù)事項(xiàng)簽訂的其他相關(guān)協(xié)議，并要求乙方承擔(dān)由此給甲方造成的全部損失；（3）要求乙方支付違約金，違約金金額根據(jù)違約情節(jié)嚴(yán)重程度確定：①一般違約（如輕微泄露非敏感客戶信息、未按約定留存訪問(wèn)日志等）：違約金為人民幣20萬(wàn)元；②嚴(yán)重違約（如泄露大量敏感客戶信息、多次違約、違約行為導(dǎo)致甲方商譽(yù)受損、面臨監(jiān)管處罰或客戶大規(guī)模索賠、給客戶造成重大損失等）：違約金為人民幣50萬(wàn)元至500萬(wàn)元，具體金額由甲方根據(jù)損失情況確定；（4）要求乙方賠償甲方的全部實(shí)際損失，包括但不限于直接經(jīng)濟(jì)損失（如客戶索賠費(fèi)用、數(shù)據(jù)修復(fù)費(fèi)用、維權(quán)費(fèi)用、罰款、保證金損失等）、間接經(jīng)濟(jì)損失（如業(yè)務(wù)中斷損失、客戶流失損失、商譽(yù)損失、預(yù)期利益損失等），若違約金不足以彌補(bǔ)甲方損失的，乙方還應(yīng)就不足部分進(jìn)行賠償。6.2若乙方違反本協(xié)議約定，擅自披露、使用或倒賣客戶信息獲取違法所得的，甲方有權(quán)沒(méi)收乙方的全部違法所得，并要求乙方額外支付違法所得1倍以上3倍以下的賠償金。6.3因乙方違約導(dǎo)致客戶信息泄露或?yàn)E用，引發(fā)客戶投訴、索賠、仲裁、訴訟或監(jiān)管部門調(diào)查處罰的，全部責(zé)任由乙方承擔(dān)，包括但不限于向客戶支付賠償金、承擔(dān)訴訟費(fèi)用、仲裁費(fèi)用、應(yīng)對(duì)監(jiān)管調(diào)查費(fèi)用、支付罰款、輿情處置費(fèi)用等，同時(shí)乙方應(yīng)配合甲方處理相關(guān)事宜，不得推諉、拖延。6.4乙方違反本協(xié)議約定的保密義務(wù)，甲方為追究乙方違約責(zé)任所支付的全部費(fèi)用（包括但不限于律師費(fèi)、訴訟費(fèi)、仲裁費(fèi)、保全費(fèi)、公證費(fèi)、差旅費(fèi)、鑒定費(fèi)、評(píng)估費(fèi)、輿情處置費(fèi)等），均由乙方承擔(dān)。6.5乙方支付的違約金及賠償金，不足以彌補(bǔ)甲方及客戶損失的，甲方有權(quán)繼續(xù)向乙方追償。第七條爭(zhēng)議解決7.1本協(xié)議的簽訂、履行、解釋、變更、終止及爭(zhēng)議解決均適用中華人民共和國(guó)法律（不包括香港特別行政區(qū)、澳門特別行政區(qū)及臺(tái)灣地區(qū)法律）。7.2甲乙雙方因本協(xié)議引起的或與本協(xié)議有關(guān)的任何爭(zhēng)議、糾紛，應(yīng)首先通過(guò)友好協(xié)商解決；協(xié)商不成的，任何一方均有權(quán)向甲方注冊(cè)地址/主要經(jīng)營(yíng)場(chǎng)所所在地有管轄權(quán)的人民法院提起訴訟。7.3在爭(zhēng)議解決期間，除爭(zhēng)議事項(xiàng)外，本協(xié)議其他條款應(yīng)繼續(xù)履行，雙方均應(yīng)恪守各自的義務(wù)，不得因爭(zhēng)議而中止或終止本協(xié)議的履行（法律另有規(guī)定的除外）。第八條其他條款8.1本協(xié)議自雙方簽字蓋章之日起生效，有效期至本協(xié)議約定的全部保密義務(wù)履行完畢之日止。本協(xié)議一式肆份，甲乙雙方各執(zhí)貳份，具有同等法律效力。8.2本協(xié)議的任何修改、補(bǔ)充或變更，均須經(jīng)雙方協(xié)商一致并簽訂書(shū)面補(bǔ)充協(xié)議，補(bǔ)充協(xié)議與本協(xié)議具有同等法律效力。補(bǔ)充協(xié)議內(nèi)容與本協(xié)議不一致的，以補(bǔ)充協(xié)議為準(zhǔn)。8.3乙方確認(rèn)，其在簽署本協(xié)議前已仔細(xì)閱讀并充分理解本協(xié)議的全部條款，明確知曉其承擔(dān)的客戶信息保密義務(wù)、合規(guī)要求及違反義務(wù)的法律后果，并自愿簽署本協(xié)議，接受本協(xié)議條款的約束。8.4本協(xié)議項(xiàng)下的所有通知、函件等均應(yīng)以書(shū)面形式發(fā)出，可通過(guò)專人送達(dá)、掛號(hào)信、順豐速運(yùn)等快遞方式或雙方確認(rèn)的電子郵箱送達(dá)至本協(xié)議首頁(yè)載明的地址或聯(lián)系方式。專人送達(dá)的，自送達(dá)之日起生效；快遞送達(dá)的，自快遞簽收之日起生效；電子郵箱送達(dá)的，自郵件發(fā)出之日起24小時(shí)后視為生效。任何一方變更聯(lián)系方式的，應(yīng)提前3個(gè)工作日書(shū)面通知另一方，否則因此產(chǎn)生的送達(dá)不能等后果由該方自行承擔(dān)。8.5本協(xié)議項(xiàng)下的保密義務(wù)、違約責(zé)任、爭(zhēng)議解決及其他具有獨(dú)立性的條款，在本協(xié)議終止、解除、無(wú)效或被撤銷后仍然有效，雙方應(yīng)繼續(xù)履行。8.6雙方確認(rèn)，本協(xié)議約定的義務(wù)是乙方的核心義務(wù)，甲方無(wú)需為乙方履行保密義務(wù)支付額外費(fèi)用（雙方另有明確約定的除外）。8.7本協(xié)議未盡事宜，雙方可另行協(xié)商并簽訂書(shū)面文件，作為本協(xié)議的補(bǔ)充條款。（以下無(wú)正文，為簽署頁(yè)）甲方（蓋章）：__________________________法定代表人/授權(quán)代表人（簽字）：________________日期：______年____月____日乙方（蓋章）：__________________________法定代表人/授權(quán)代表人（簽字）：________________日期：______年____月____日PartTwoEnglishTermsArticle1DefinitionsandScope1.1CustomerInformation:ReferstoallinformationandderivativematerialsrelatedtoPartyA'scustomers(includingnaturalpersoncustomers,legalpersoncustomersandunincorporatedorganizationcustomers)thatarelegallyownedorentitledtobedisposedofbyPartyA,regardlessoftheform(written,electronic,oral,image,physical,etc.),includingbutnotlimitedto:(1)NaturalPersonCustomerInformation:Name,gender,dateofbirth,IDcardnumber,passportnumber,contactinformation(telephone,shortmessage,email,communicationaddress,etc.),bankaccountinformation,paymentrecords,consumptionpreferences,healthinformation,identityverificationinformation,businesshandlingrecordsandotherinformationthatcanidentifytheidentityofthenaturalpersoncustomerorreflecttheiractivitystatus;(2)LegalPerson/UnincorporatedOrganizationCustomerInformation:Customername,unifiedsocialcreditcode/registrationnumber,registeredaddress,businessaddress,contactinformation,legalrepresentative/responsiblepersoninformation,handlerinformation,businesscooperationagreements,purchaselists,supplyrecords,financialtransactiondata,businessplans,technicalrequirements,customerupstreamanddownstreamresourcesandothercoreinformationrelatedtothecustomer'sbusinessactivities;(3)Othercustomer-relatedinformationandmaterialsmarkedasconfidentialbyPartyAorknown/shouldbeknowntobeconfidentialbyPartyBuponreceipt.1.2InformationProvider:ReferstothesubjectthatprovidesCustomerInformationtotheotherpartyunderthisAgreement,i.e.,PartyAherein.1.3InformationReceiver:ReferstothesubjectthatreceivesandusesCustomerInformationunderthisAgreement,i.e.,PartyBherein.1.4AuthorizedUser:Referstopersonnel(includingPartyB'semployees,part-timestaff,outsourcingpersonnel,consultants,etc.)whoareauthorizedinwritingbyPartyB,clearlyinformedoftheconfidentialityobligationsunderthisAgreement,andhaveanemployment,labororentrustmentrelationshipwithPartyBforthepurposeofperformingtheagreedmattersunderthisAgreement.1.5ThirdParty:Referstoanynaturalperson,legalperson,unincorporatedorganization,governmentagencyorothersubjectotherthanPartyA,PartyBandPartyB'sAuthorizedUsers.1.6ConfidentialityObligation:ReferstotheobligationoftheInformationReceiveranditsAuthorizedUsersnottoarbitrarilydisclose,leak,disseminate,transfer,use,alter,destroyorusethereceivedCustomerInformationforpurposesotherthanthoseagreedinthisAgreement.Article2ContentofConfidentialityObligation2.1PartyBundertakestoassumestrictconfidentialityobligationsforallCustomerInformationobtainedfromPartyAthroughthecooperation/servicemattersagreedinthisAgreement.WithoutthepriorwrittenconsentofPartyA,PartyBshallnotengageinthefollowingacts:(1)Disclose,leak,disseminate,transfer,donate,lease,lendCustomerInformationtoanyThirdParty,includingbutnotlimitedtotransmittingCustomerInformationtoPartyB'sAffiliates,unauthorizedpersonnel,partners,etc.;(2)UseCustomerInformationforanycommercialornon-commercialpurposesotherthanthecooperation/servicemattersagreedinthisAgreement,includingbutnotlimitedtousingitforPartyB'sownbusinesspromotion,customerdevelopment,academicresearch,dataprocessing,etc.;(3)Arbitrarilycopy,modify,edit,disassemble,extract,compile,reverseengineer,formatorconductanyotherformofprocessingandtransformationonCustomerInformation,andshallnotillegallyintegrateormatchCustomerInformationwithPartyB'sowninformationorThirdPartyinformation;(4)AllowanyThirdPartytoaccess,obtainorgetcopiesorexcerptsofCustomerInformation,andshallnotprovideanyconvenientconditionsforThirdPartiestoobtainCustomerInformation;(5)DiscardordamagecarrierscontainingCustomerInformation(includingbutnotlimitedtopaperdocuments,harddisks,Udisks,opticaldiscs,mobiledevices,etc.),orotheractsthatleadtotheleakageofCustomerInformationwithouttakingsafetyprotectionmeasures.2.2PartyBshallestablishandimproveaCustomerInformationconfidentialitymanagementsystemandsafetyprotectionmechanism,andtaketechnicalandmanagementmeasuresmatchingthesensitivityandimportanceofCustomerInformationtoensurethesecurityofCustomerInformation,includingbutnotlimitedto:(1)EstablishaclassifiedmanagementsystemforCustomerInformation,andadoptenhancedprotectionmeasuressuchasencryptedstorage,dual-authorizationaccess,specialpersonmanagement,anddynamicmonitoringforhighlysensitiveCustomerInformation(suchasnaturalpersoncustomers'IDcardnumbers,bankaccountinformation,healthinformation,etc.);(2)StrictlycontroltheaccessrightstoCustomerInformation,onlyopenittoAuthorizedUserswhoreallyneedtoaccessCustomerInformation,establishanindependentaccessaccount,passwordandoperationlogforeachAuthorizedUser,thelogretentionperiodshallnotbelessthan2yearsaftertheexpirationoftheconfidentialityperiodunderthisAgreement,andregularlyverifyandcleanupaccessrights;(3)RegularlycarryoutCustomerInformationconfidentialitytraining,legalandregulatorytrainingandsafeoperationtrainingforAuthorizedUsers,informthemoftheirconfidentialityobligations,breachconsequencesandemergencydisposalprocedures,signawrittenconfidentialitycommitmentwitheachAuthorizedUser,andretaintrainingrecordsandoriginalcommitments;(4)ForCustomerInformationinelectronicform,taketechnicalprotectionmeasuressuchasanti-virusintrusion,anti-hackerattack,dataencryption,databackup,abnormalbehaviormonitoring,andaccesstraceability,regularlycarryoutsecurityvulnerabilitydetectionandrepair,andensurethesecurityofstoragesystemsandtransmissionchannels;(5)ForCustomerInformationinwrittenform,takemanagementmeasuressuchasspecialcabinetstorage,lockedcustody,borrowingregistration,timelyrecoveryafteruse,andirreversibledestructionofinvaliddocuments(suchasshredding,incineration,etc.),andretainborrowingrecordsanddestructionrecords;(6)EstablishanemergencydisposalmechanismforCustomerInformationleakage.IncaseofdiscoveryofCustomerInformationleakage,loss,damage,etc.,PartyBshallimmediatelytakeremedialmeasures(includingbutnotlimitedtostoppingleakage,recoveringinformation,eliminatingimpact,etc.),andnotifyPartyAinwritingwithin24hours,cooperatingwithPartyAandrelevantdepartmentsininvestigationanddisposal.2.3PartyBshallbejointlyandseverallyliablefortheactsofitsAuthorizedUsers.IfanyAuthorizedUserofPartyBviolatestheconfidentialityobligationsunderthisAgreement,PartyBshallimmediatelystoptheiracts,takeeffectiveremedialmeasures,andbearalllossescausedtoPartyAandcustomersthereby.PartyAhastherighttounilaterallyterminatethisAgreementandotherrelevantcooperationagreementsbetweenthetwoparties.2.4PartyBundertakesthatintheprocessofusingCustomerInformation,itshallstrictlycomplywiththeprovisionsofrelevantlawsandregulationssuchasthePersonalInformationProtectionLawofthePeople'sRepublicofChina,respectcustomers'legitimaterightsandinterestssuchasrighttoprivacy,righttoknow,righttocorrection,righttodeletion,etc.,shallnotillegallycollect,use,process,transmit,provideordiscloseCustomerInformation,andshallnotinfringeuponcustomers'legitimaterightsandinterests.IfPartyB'sillegaluseofCustomerInformationleadstocustomercomplaints,claims,arbitration,litigationorregulatorypenalties,allresponsibilitiesshallbebornebyPartyB.IfPartyAsufferslossesthereby,PartyBshallfullycompensate.Article3ExceptionstoConfidentialityObligationPartyBshallnotbedeemedtohaveviolatedthisAgreementifitdisclosesorusesCustomerInformationunderthefollowingcircumstances,butshallperformthecorrespondingnotificationandcooperationobligations:3.1TheCustomerInformationhasbeencompletelymadepublicthroughlegalchannels,andthepublicdisclosureisnotcausedbythebreachofcontractbyPartyBoritsAuthorizedUsers;3.2PartyBmakesdisclosureinaccordancewiththemandatoryrequirements(includingbutnotlimitedtosubpoenas,rulings,decisions,etc.)oflawsandregulations,judicialorgans,arbitrationinstitutionsoradministrativesupervisiondepartments.PartyBshall,totheextentpossible,notifyPartyAinwriting3workingdaysinadvancebeforedisclosure(exceptwhereprohibitedbylawsandregulationsorrelevantauthorities),andcooperatewithPartyAtotakereasonablemeasurestonarrowthescopeofdisclosureandreducetheriskofinformationleakage,retainingrelevantnotificationandcooperationrecords;3.3TheCustomerInformationwasindependentlyobtainedbyPartyBthroughlegalchannelsbeforereceivingthedisclosurefromPartyAandthereisnoconfidentialityobligation.PartyBshallprovidesufficientevidencetoprovethelegalityofitsacquisitionchannelandthefactthatthereisnoconfidentialityobligation;3.4PartyBlegallyobtainstheCustomerInformationfromaThirdPartyhavingtherighttodisclosesuchinformation,andtheThirdPartyhasnoconfidentialityobligationfortheinformation.PartyBshallconfirmthedisclosurerightoftheThirdPartybeforeobtainingandretainrelevantcertificationdocuments;3.5PartyBdisclosestheCustomerInformationtoitslawyers,accountantsandotherprofessionalconsultantswithinthenecessaryscopetosafeguarditslegitimaterightsandinterests(suchasrespondingtolitigation,arbitration,administrativepenalties,debtrecovery,etc.).PartyBshallensurethatsuchprofessionalconsultantsassumethesamestrictconfidentialityobligationsasthoseunderthisAgreementandshallbejointlyandseverallyliablefortheactsoftheprofessionalconsultants,retainingtheconfidentialitycommitmentdocumentsoftheprofessionalconsultants.Article4TermofConfidentiality4.1TheconfidentialityobligationsunderthisAgreementshalltakeeffectfromthedateonwhichPartyBreceivestheCustomerInformationandshallremainvaliduntiloneofthefollowingcircumstancesoccurs(whicheveroccurslater):(1)TheCustomerInformationiscompletelymadepublicthroughlegalchannels;(2)ThetermofconfidentialityagreedinthisAgreementexpires;(3)PartyAnotifiesPartyBinwritingtoreleaseitfromtheconfidentialityobligationforspecificCustomerInformation(thenoticeshallnotviolatelaws,regulationsandcustomerrightsandinterestsprotectionrequirements,andshallbedeliveredtoPartyBinwriting15workingdaysinadvance).4.2ThetermofconfidentialityagreedinthisAgreement:(1)ThetermofconfidentialityforgeneralCustomerInformation(suchasnon-sensitiveinformationincludingcustomername,publiccontactinformation,etc.)shallbe3yearsaftertheterminationofthecooperation/servicemattersbetweenthetwopartiesfromtheeffectivedateofthisAgreement;(2)ThetermofconfidentialityforsensitiveCustomerInformation(includingbutnotlimitedtonaturalpersoncustomers'IDcardnumbers,bankaccountinformation,healthinformation,coretradesecretsoflegalpersoncustomers,financialdata,etc.)shallbe5yearsaftertheinformationismadepublicfromthedateonwhichPartyBreceivestheinformation;iftheinformationisnevermadepublic,thetermofconfidentialityshallremainvalidpermanently,andPartyBshallbeartheconfidentialityobligationforlife.Thetermination,rescission,invalidityorrevocationofthisAgreementshallnotaffecttheconfidentialityobligationsassumedbyPartyBfortheCustomerInformationithasreceived.SuchconfidentialityobligationsshallcontinueuntiltheexpirationofthetermofconfidentialityagreedinthisAgreement.Article5ReturnandDestructionofCustomerInformation5.1Afterthetermination,rescissionofthisAgreementorthecompletionofthecooperation/servicemattersbetweenthetwoparties,orifPartyArequiresPartyBtoreturnordestroyCustomerInformationinwriting,PartyBshallcompletethefollowingmatterswithin5workingdaysfromthedateofreceivingthewrittennoticefromPartyA:(1)Returnalloriginals,copies,duplicates,processedproducts,derivativematerialsoftheCustomerInformationheldbyitandthecarriersstoringCustomerInformation(includingbutnotlimitedtopaperdocuments,harddisks,Udisks,opticaldiscs,mobiledevices,serverbackups,etc.)toPartyAinfull,andissueaCustomerInformationReturnList.Thelistshallclearlyspecifytheinformationname,quantity,form,carriertypeandothercontents,whichshallbesignedandsealedbyPartyAafterverificationandconfirmation;(2)ForCustomerInformationthatcannotbereturned(suchaselectronicdatastoredinPartyB'ssystem,informationfragmentsintegratedintobusinessprocesses,etc.),itshallbecompletelydestroyedinanirreversibledestructionmannerinaccordancewiththewrittenrequirementsofPartyAtoensurethattheinformationcannotberecovered,andissueaCustomerInformationDestructionConfirmation.Theconfirmationshallindicatethename,quantity,form,destructionmethod,destructiontime,handlerandothercontentsofthedestroyedinformation,andretainthedestructionprocessrecords(suchasphotos,videos,logs,etc.)andrelevantevidenceforPartyA'sverification;(3)TheCustomerInformationandrelatedcarriersheldbyPartyB'sAuthorizedUsersshallberecoveredbyPartyBandreturnedordestroyedinaccordancewiththeprovisionsofthisArticletoensurethatnoCustomerInformationisretainedinanyform.5.2PartyBconfirmsthatafterthereturnordestructionofCustomerInformation,itnolongerholdsorretainsanyformofCustomerInformation,norwillitretain,recoveroruseCustomerInformationinanywaysuchasmemory,backup,screenshot,copy,transcription,etc.IfPartyBviolatestheprovisionsofthisArticle,resultingintheleakageorabuseofCustomerInformation,itshallbearalllossescausedtoPartyAandcustomersthereby.Article6LiabilityforBreachofContract6.1IfPartyBviolatestheobligationsagreedinArticles2,4and5ofthisAgreement,PartyAhastherighttotakeoneormoreofthefollowingmeasures:(1)RequirePartyBtoimmediatelystopthebreachingactandtakeremedialmeasures(includingbutnotlimitedtoreturningordestroyingCustomerInformation,eliminatingtheimpact,apologizingtocustomers,undertakingcustomerclaims,etc.);(2)TerminatethisAgreementandotherrelevantcooperationagreementssignedbybothpartiesbasedonthecooperation/servicematters,andrequirePartyBtobearalllossescausedtoPartyAthereby;(3)RequirePartyBtopayliquidateddamages.Theamountofliquidateddamagesshallbedeterminedaccordingtotheseverityofthebreach:①Generalbreachofcontract(suchasminorleakageofnon-sensitiveCustomerInformation,failuretoretainaccesslogsasagreed,etc.):TheliquidateddamagesshallbeRMB200,000yuan;②Seriousbreachofcontract(suchasleakageofalargeamountofsensitiveCustomerInformation,repeatedbreaches,breachofcontractleadingtodamagetoPartyA'sgoodwill,facingregulatorypenaltiesorlarge-scalecustomerclaims,causingsignificantlossestocustomers,etc.):TheliquidateddamagesshallbeRMB500,000yuantoRMB5,000,000yuan,andthespecificamountshallbedeterminedbyPartyAaccordingtothelosssituation;(4)RequirePartyBtocompensatePartyAforallactuallosses,includingbutnotlimitedtodirecteconomiclosses(suchascustomerclaimfees,datarepaircosts,rightsprotectioncosts,fines,depositlosses,etc.)andindirecteconomiclosses(suchasbusinessinterruptionlosses,customerlosslosses,goodwilllosses,expectedinterestlosses,etc.).IftheliquidateddamagesareinsufficienttocompensateforPartyA'slosses,PartyBshallalsocompensatefortheinsufficientpart.6.2IfPartyBviolatestheprovisionsofthisAgreementandarbitrarilydiscloses,usesorresellsCustomerInformationtoobtainillegalgains,PartyAhastherighttoconfiscateallillegalgainsofPartyBandrequirePartyBtopayadditionalcompensationof1to3timestheillegalgains.IftheleakageorabuseofCustomerInformationcausedbyPartyB'sbreachofcontractleadstocustomercomplaints,claims,arbitration,litigationorregulatoryinvestigationandpunishment,allresponsibilitiesshallbebornebyPartyB,includingbutnotlimitedtopayingcompensationtocustomers,bearinglitigationcosts,arbitrationfees,costsforrespondingtoregulatoryinvestigations,payingfines,publicopiniondisposalcosts,etc.Meanwhile,PartyBshallcooperatewithPartyAinhandlingrelevantmattersandshallnotshirkordelay.AllcostspaidbyPartyAtopursuePartyB'sliabilityforbreachofcontract(includingbutnotlimitedtoattorneyfees,litigationfees,arbitrationfees,preservationfees,notarizationfees,travelexpenses,appraisalfees,evaluationfees,publicopiniondisposalfees,etc.)shallbebornebyPartyB.IftheliquidateddamagesandcompensationpaidbyPartyBareinsufficienttocompensateforthelossesofPartyAandcustomers,PartyAhastherighttocontinuetoclaimcompensationfromPartyB.Article7DisputeResolution7.1Thesigning,performance,interpretation,modification,terminationanddisputeresolutionofthisAgreementshallallbegovernedbythelawsofthePeople'sRepublicofChina(excludingthelawsoftheHongKongSpecialAdministrativeRegion,theMacaoSpecialAdministrativeRegionandTaiwanRegion).AnydisputeorcontroversyarisingfromorinconnectionwiththisAgreementbetweenPartyAandPartyBshallfirstberesolvedthroughfriendlynegotiation;ifthenegotiationfails,eitherpartyhastherighttofilealawsuitwiththepeople'scourtwithjurisdictionattheplaceofPartyA'sregisteredaddress/mainbusinessplace.Duringthedisputeresolutionperiod,exceptforthedisputedmatters,otherclausesofthisAgreementshallcontinuetobeperformed.BothpartiesshallabidebytheirrespectiveobligationsandshallnotsuspendorterminatetheperformanceofthisAgreementduetothedispute(exceptasotherwiseprovidedbylaw).Article8OtherProvisions8.1ThisAgreementshalltakeeffectfromthedateofsignatureandsealbybothpartiesa