MasterCard Rules (PDF)

Customer Obligations
3.6 Provision and Use of Information
which the Corporation prepares the compilation, analysis, or other report or
(ii) Cardholder whose Transactions were involved in the preparation of the
compilation, analysis, or other report;
13. For the purpose of complying with applicable legal requirements;
14. For other purposes for which consent has been provided by the individual
to whom the confidential information and/or Confidential Transaction Data
relates.
Each Customer must ensure that it complies with the Standards and applicable
laws and regulations in connection with disclosing any Confidential Transaction
Data or confidential information to the Corporation or the Corporation’s
Affiliates to allow the uses and disclosures described herein, including any laws
requiring the Customer to provide notices to individuals about information
practices or to obtain consent from individuals to such practices.
A Customer must provide Confidential Transaction Data to the Corporation or >>
through the Corporation’s processes or systems solely as prescribed by the
Standards or as otherwise required by the Corporation or applicable law. For
example, a primary account number (PAN) must not be provided through the
Interchange System except as required by the technical specifications or other
Standards pertaining to the Interchange System or a component thereof.
3.6.3 Use of Corporation Information by a Customer
The Corporation is not responsible and disclaims any responsibility for the
accuracy, completeness, or timeliness of any information disclosed by the
Corporation to a Customer; and the Corporation makes no warranty, express or
implied, including, but not limited to, any warranty of merchantability or fitness
for any particular purpose with respect to any information disclosed by or on
behalf of the Corporation to any Customer disclosed directly or indirectly to
any participant in a Customer’s Activity. Each Customer assumes all risk of use
of any information disclosed directly or indirectly to a Customer or to any
participant in a Customer’s Activity by or on behalf of the Corporation.
3.6.4 Confidential Information of the Corporation and the
Corporation's Affiliates
A Customer must not disclose confidential information of the Corporation or
of the Corporation’s parents, subsidiaries, and Affiliates (herein collectively
referred to as the “Corporation’s Affiliates”) except:
1. On a need-to-know basis to the Customer’s staff, accountants, auditors, or
legal counsel subject to standard confidentiality restrictions, or
2. As may be required by any court process or governmental agency having or
claiming jurisdiction over the Customer, in which event the Customer must
promptly provide written notice of such requirement to the Secretary of the
Corporation and to the extent possible, the Customer must seek confidential
treatment by the court or agency.
©1969–2012 MasterCard. Proprietary. All rights reserved.
3-12 12 December 2012 • MasterCard Rules