The Supplier Data used to provide the US Identity Verification Dataset is provided by GBG’s Supplier, Equifax, Inc. (“Equifax”). GBG is obliged under the terms of its agreement with its Supplier to ensure that all Customers agree to comply with the following licencing provisions. 

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the Agreement:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.

2. USE OF THE DATASET
2.1. The End User shall not use the Dataset for the eligibility for personal credit, insurance, employment or any other permissible purpose of any Data Subject for which a consumer report may be used under the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.), as amended, and all regulations promulgated thereunder (“FCRA”) or use the Dataset in any way for the purpose of taking “adverse action” against a consumer, as defined in the Equal Credit Opportunity Act and Regulation B.
2.2. The End User acknowledges that neither the Dataset nor the Results constitutes, includes, reflects, or incorporates any “consumer report” as defined in FCRA, any credit reference, or “individually identifiable healthcare information” or “protected healthcare information” as defined in HIPAA.
2.3. The End User shall not provide End User Data that contains information covered under the Protected Health Information (as that term is defined in 45 C.F.R. Sec. 160.103) or Electronic Health Records or Patient Health Records (as those terms are defined in 42 U.S.C. Sec. 17921(5), and 42 U.S.C. Sec. 17921(11), respectively) (collectively, “HIPAA”).
2.4. The End User shall not do any of the following: (i) remove or obscure any copyright, trademark, confidentiality or other proprietary rights notice appearing on or in the Services; (ii) reproduce, translate, modify, port or create derivative works of all or any part of the Services, including any feature, design or graphic therein, or write or develop any program based thereupon, except as expressly permitted by applicable law notwithstanding a contractual prohibition to the contrary; (iii) sublicense, loan, distribute, transfer, sell, alienate, or assign the Services except as expressly permitted in the Agreement; (iv) use or permit the use of the Services for any marketing purpose; (v) use or permit the use of the Services for commercial time-sharing, rental, outsourcing, service bureau use, to process data on behalf of any third party or to help build a competitive solution; (vi) reverse engineer, disassemble, decompile, or otherwise attempt to derive the source code, algorithms, architecture or other elements of the Services except as expressly permitted under applicable law notwithstanding a contractual prohibition to the contrary; (vii) attempt to probe, scan or test the vulnerability of the Services, load test the Services in order to test scalability or intentionally interfere with or disrupt the Services or cause excessive or disproportionate load on the Services or the servers or networks used to make the Services available; or (viii) post, transmit to, through or from, or otherwise make available in or use with, the Services any data, information or materials, including code, that is or may be: (a) threatening, harassing, degrading, hateful or intimidating, harmful to minors, or that otherwise fails to respect the rights and dignity of others; (b) obscene, immoral, indecent, pornographic or otherwise objectionable; (c) protected by copyright, trademark, design rights, trade secret rights, right of publicity or privacy, or any other proprietary right, without the prior express written consent of the applicable owner; or (d) any malware (such as a virus, worm, Trojan horse, Easter egg, time bomb or spyware) or other computer code, routines, files, scripts, agents or programs that is or is potentially harmful or invasive or intended to damage or hijack the operation of, limit the use of, or monitor the use of, any hardware, software or equipment or that may damage, intercept or expropriate any data.
2.5. The End User certifies that it will order the Services only when it is duly authorised by a Data Subject who resides in the United States in accordance with applicable law. The End User shall use the Results in accordance with applicable consumer protection, marketing, data security, export and privacy laws including, as applicable and without limitation, the Federal Fair Credit Reporting Act, 15 U.S.C. 1681 et. seq., as amended and all state law counterparts thereto, Title V of the Gramm-Leach-Bliley Act, 15 U.S.C. Sec. 6801 et seq. (“GLB”), the Telephone Consumer Protection Act, 47 U.S.C. 227, et. seq., as amended (the “TCPA”), all state law counterparts of any applicable Federal law and all applicable regulations promulgated under any of them, including, without limitation, any provisions requiring notification or disclosure to the Data Subject.

3. LICENCE RIGHTS
3.1. The End User grants, to Equifax and its designees, a revocable right to use, license, reproduce, modify, store, disclose, and make derivatives of the End User Data for the specific and limited lawful purpose of: (i) the operation and provision of the Services specifically to the End User, and (ii) in connection with legal-related obligations.
3.2. Equifax has no obligation to store or back up any End User Data. Any End User Data stored by Equifax may be deleted by Equifax at any time. Except as required by applicable law or as necessary to provide the Services to the End User, Equifax shall in no event disclose the identity of the End User to an unaffiliated third party as the source of any element of End User Data.