Vendor and Company shall implement and maintain no less than commercially reasonable security procedures and practices, appropriate to the nature of the information, to protect Company Personal Data from unauthorized access, destruction, use, modification, or disclosure.</p> <p>8.2. Vendor shall fully comply with the security measures attached at Appendix 3.</p> <p> <strong>9.