Contractor shall use best efforts to immediately mitigate or resolve any Security Incident, at Contractor's expense and in accordance with applicable privacy rights, laws, regulations and standards. Contractor shall reimburse Institution for actual costs incurred by Institution in responding to, and mitigating damages caused by, any Security Incident, including all costs of notice and/or remediation incurred under all applicable laws as a result of the Security Incident. Return of Personal Information. At any time during the term of this Agreement, at the Institution's written request or upon the termination or expiration of this Agreement, Contractor shall return to the Institution all copies, whether in written, electronic or other form or media, of Confidential, Highly- Sensitive, or Personal Information in its possession, or at Customer's direction, securely dispose of all such copies.

E.17. Contractor Commitment to Diversity. The Contractor shall assist the Institution in monitoring the Contractor's performance of this commitment by providing, as requested, a quarterly report of participation in the performance of this Contract by small business enterprises and businesses owned by minorities, women, and Tennessee service-disabled veterans. Such reports shall be provided to the Institution in form and substance as required by Institution.

E.18. Service and Software Accessibility Standards. The Contractor warrants and represents that the service and software, including any updates, provided to the Institution will meet the accessibility standards set forth in WCAG 2.0 AA (also known as ISO standard, ISO/IEC 40500:2012), EPub 3 and Section 508 of the Vocational Rehabilitation Act. To the extent that the products fail to meet the WCAG 2.0 AA, EPub 3 and Section 508 standards, the Contractor will provide Institution with a fully completed Accessibility Statement and Conformance and Remediation form. The Contractor shall indemnify and hold the Institution harmless in the event of claims arising from inaccessibility related to the Contractor's product and/or services. E.19. Click-Wrap Agreements. The Contractor agrees that click-wrap agreements shall not be binding upon the Institution. No employee has the actual or apparent authority to enter into click-wrap agreements on behalf of the Institution without the approval of the Institution's Proc urement and/or Contracts Office. No employee has the authority to modify, amend, or supplement this Agreement through a click-wrap agreement. This Agreement can only be modified, amended, or supplemented under these terms through a written amendment in accordance with the Institution's and TBR's procedures, policies, and guidelines. E.20. The Contractor fully understands that this Agreement is not binding except and until all appropriate State officials' approvals and signatures have been obtained, and the fully executed document returned to the Contractor. E.21. Iran Divestment Act. The requirements of Tenn. Code Ann. § 12-12-101 et.seq., addressing contracting with persons with investment activities in Iran, shall be a material provision of this Contract. The Contractor agrees, under penalty of perjury, that to the best of its knowledge and belief that it is not on the list created pursuant to Tenn. Code Ann. § 12-12-106.

IN WITNESS, WHEREOF:
[CONTRACTOR LEGAL ENTITY NAME]:

[NAME AND TITLE]	Date