Information disclosed by Bank of America and any results of processing such Confidential Information or derived in any way therefrom shall at all times remain the property of Bank of America. Supplier shall have the responsibility for and bear all risk of loss or damage to Confidential Information and damages resulting from improper or inaccurate processing of such data arising from the negligence or willful misconduct of Supplier, its Representatives or Subcontractors. Proprietary to Bank of America Page 21 vTIP2010 Source: CARDLYTICS, INC., S-1, 1/12/2018 27.8 Supplier acknowledges that Bank of America is required to comply with the information security standards required by the Gramm-Leach- Bliley Act (15 U.S.C. 6801, 6805(b)(1)) and the regulations issued thereunder (12 C.F.R. Part 40), the Fair and Accurate Credit Transactions Act (15 U.S.C. 1681, 1681w) and the regulations issued thereunder (12 C.F.R. Parts 30 and 41) and with other statutory, legal and regulatory requirements (collectively, "Privacy Laws'') If applicable, Supplier shall make commercial best efforts to assist Bank of America to so comply and shall comply and conform with applicable Privacy Laws, as amended from time to time, and with the Bank of America policies for information protection as modified by Bank of America from time to time. 27.9 Bank of America may, in its sole discretion and at any time during the Term of this Agreement, suspend, revoke or terminate Supplier's right to receive Confidential Information upon written notice to Supplier. Upon receipt of that notice, Supplier shall (i) immediately stop accessing and/or accepting Confidential Information and (ii) promptly return to Bank of America or destroy according to the Information Destruction Requirements described within SCHEDULE E, "Information Security," at Bank of America's election, all Bank of America Confidential Information in the possession of Supplier or Suppliers Subcontractors, subject to and in accordance with