14.Confidentiality.
a. For purposes of this Agreement, the term “Personal Information” is as defined under applicable data protection laws, including Section 1798.140 of the California Consumer Privacy Act (“CCPA”), and refers to any and all Personal Information, in any form (e.g., written, verbal, electronic), provided to, or collected or generated by, Rock or to which Rock or Rock personnel have been given access by or on behalf of Vroom, that uniquely identifies a current, former or prospective Vroom customer or consumer. This includes, but is not limited to, financial information, including credit history, income, financial benefits, application, policy or claim information, names or lists of individuals derived from nonpublic personally identifiable information or otherwise derived in connection with the performance of the Services or this Agreement, the identification of an individual as a customer, and information about a person’s sex, date of birth, age, address, telephone number, Social Security number and any financial account information. Only Rock personnel who need to know Personal Information to perform their duties in furtherance of this Agreement and who agree to be bound by the terms hereof will be given access to Personal Information. Rock will maintain the security and confidentiality of Personal Information and will use it only for the purposes specified in this Agreement. If the Gramm-Leach-Bliley Act or any other applicable state or federal law or regulation, now or hereafter in effect, imposes a higher standard of confidentiality or security with respect to such Personal Information, such standard will prevail over the provisions of this Agreement.
b. Except as set forth herein, “Confidential Information” means allnon-public, confidential or proprietary information disclosed before, on or after the Effective Date, by a Party (the “Disclosing Party”) or its affiliates to the other Party (the “Recipient”) or its affiliates, or to any of the Recipient’s or its affiliates’ employees, officers, directors, partners, shareholders, agents, attorneys, accountants or advisors (collectively, “Representatives”), whether disclosed orally or disclosed or accessed in written, electronic or other media, and whether or not marked, designated or otherwise identified as “confidential”, including, without limitation: (i) all information concerning the Disclosing Party’s and its affiliates’ and their customers’, suppliers’, and other third parties’ past, present and future business affairs, methods and operations, including, without limitation, finances, supplier information, products, services, organizational structure and internal practices, forecasts, sales and other financial results, records and budgets, and business, marketing, development, sales and other commercial strategies; (ii) the Disclosing Party’s unpatented inventions, ideas, methods and discoveries, trade secrets,know-how, unpublished patent applications, and other confidential intellectual property; (iii) all designs, specifications, documentation, components, source code, object code, images, icons, audiovisual components and objects, schematics, drawings, protocols, processes, and other visual depictions, in whole or in part, of any of the foregoing; (iv) any third-party confidential information included with, or incorporated in, any information provided by the Disclosing Party to the Recipient or its Representatives; and (v) all notes, analyses, compilations, reports, forecasts, studies, samples, data, statistics, summaries, and other materials prepared by or for the Recipient or its Representatives that contain, in whole or in part, any of the Disclosing Party’s Confidential Information. For the avoidance of doubt, each of (i) any Personal Information hereunder, (ii) all Training Materials, (iii) all FAQs, and (iv) all Scripts shall be deemed to be Vroom’s Confidential Information hereunder, except for any Rock Information contained in the Training Materials, FAQs and/or Scripts, which shall be deemed to be Rock’s Confidential Information.
10