Page 2 of 5
Created 07-01-15
Version ICI2015.1
Subscription Agreement – Terms and Conditions
This subscription agreement (“the Agreement”) is entered into as of the date of execution below (the “Effective Date”), by and between ISO Claims
Services, Inc., a Delaware corporation, through its Insurance Information Exchange unit (“iiX”) with offices at 1716 Briarcrest, Suite 200 Bryan, TX
77802, and ________________________________________________________________________________________________, (Customer Name)
a ______________ (State) corporation/other entity with offices at ________________________________________________ (City, State).
1. SERVICES AND RATES. Certain reports, records, products, and/or services (collectively, “Information Services”) that may include Motor Vehicle
Reports (“MVRs”), Undisclosed Driver Information (“UDI”), Undisclosed Driver and VIN report (“UDV”), A-PLUS (a product of ISO Services, Inc.), and
Scored Credit (a product of TransUnion), will be provided to Customer under the terms specified in this Agreement. State-set record fees are subject to
change at any time.
2. SOLE USE AND OUTSOURCING. Customer warrants and agrees that any requests made for Information Services are for the sole and internal
use of Customer and are to be used only as a factor in establishing a consumer's eligibility for new or continued insurance purposes, unless otherwise
restricted further by Specific State Forms (as defined below). Customer may deliver the Information Services to Customer’s employees and authorized
users solely as needed to perform functions consistent with this Agreement’s purpose. All such individuals shall be subject to this Agreement’s terms
and conditions and all applicable laws and regulations. Except as provided in Section 2.1, no one acting by or through Customer may sell, transfer,
distribute, publish, disclose, display or otherwise make the Information Services available, in whole or in part, or any of the information in them, to any
other person or entity, without the express written consent of iiX.
2.1 Use of Outsourcing Customer warrants and agrees that to the extent it has entered into or may enter into an arrangement with a third party
to provide services on Customer’s behalf (“Outsourcer”) to process Information Services, the arrangement shall be consistent with this Agreement
and solely for the purpose and benefit of Customer. The Information Services may be provided to Outsourcer solely to enable it to assist
Customer under this Agreement, provided that Customer, (1) if required by applicable federal or state regulatory frameworks, discloses to any
affected consumer(s) that his/her information might be subject to outsourcing, including possible offshore access, and obtains the consumer’s
permission for such access, and (2) requires such Outsourcer, in writing, to confirm that it will (i) use the Information Services solely on behalf of
or for the benefit of Customer, (ii) abide by all Agreement terms and conditions regarding nondisclosure and use of the Information Services, and
(iii)
be s
ubject to any applicable laws and regulations, including but not limited to those governing privacy and the use of Personal Information
(defined below). A copy of the agreement between Customer and Outsourcer will be supplied to iiX upon iiX’s request.
2.2 Prohibitions Customer acknowledges that certain state and/or iiX data providers may prohibit access to their information by offshore users.
Customer agrees not to permit offshore access by any of its employees, authorized users, or Outsourcer in violation of any prohibition against
offshore access to records, and agrees to be responsible for the use of the Information Services by its employees, authorized users, or
Outsourcer in violation of this section.
Failure of Customer to comply in all respects with the requirements of this Section 2 is a material breach of this Agreement. In such event, iiX may
immediately terminate this Agreement and the delivery of any Information Services to Customer without notice or delay.
3. RESTRICTIONS.
3.1. Confidentiality Customer acknowledges that in connection with this Agreement, it may receive Personal Information (defined below) and
nonpublic Personal Information from state agencies and service bureaus. Personal Information is information that identifies an individual and
includes, but is not limited to: (a) first and last name or first initial and last name; (b) a home or other physical address, which includes at least street
name and name of city or town; (c) an email address; (d) a telephone number; (e) a Social Security number; (f) credit and/or debit card information,
including credit and/or debit card number with expiration date; (g) date of birth; (h) a driver’s license number; or (i) any other information from or
about an individual consumer that is combined with (a) through (h) above. Consistent with Section 2 of this Agreement, Customer agrees to treat
as confidential all Personal Information received from iiX and to disclose consumer information only to those authorized who have a need to know
such information to accomplish their duties. Customer and its authorized users shall not use Personal Information for any purpose except the
purpose permitted by this Agreement.
3.2. Compliance with Laws Customer certifies that it shall order, receive, disseminate and otherwise use the Information Services in compliance
with all applicable federal, state and local statutes, rules, codes and regulations, including but not limited to the Fair Credit Reporting Act (“FCRA”),
the Driver's Privacy Protection Act (“DPPA”), 18 U.S.C. §2721 et seq., the Gramm-Leach-Bliley Act (“GLB”) and their state equivalents, including
any changes, supplements or amendments to such statutes, rules, codes and regulations (collectively, “The Laws”). Customer understands that
violators of the FCRA, the DPPA, and other federal and state laws governing protection of Personal Information are potentially subject to civil
actions and penalties, including fines. Customer shall be responsible for understanding and for staying current with all of The Laws. Customer
further represents and warrants that it shall ensure the security and confidentiality of Personal Information in compliance with The Laws. iiX
acknowledges that it has appropriate administrative, technical and physical safeguards, including data security safeguards, in place to protect
Personal Information consistent with federal and state requirements applicable to it.
3.2.1 Notification in Event of Breach or Misuse of Information. Customer will immediately notify iiX of any inadvertent or unauthorized
release of the Information Services obtained under this Agreement or other security breach of Personal Information contained in Information