Extract to table

In the event of a conflict between this Manual and any other internal policy, procedure, or guideline, the provisions of this Manual shall control with respect to the handling of PI, except where the Cascade Information Security Policy imposes more stringent technical security requirements, in which case the more protective standard shall apply

Capitalized terms used but not defined in a particular section shall have the meanings ascribed to them in this Section 2 or, where applicable, in the Glossary of Defined Terms set forth in Appendix A

DPAs must comply with the contractual requirements specified in the CCPA/CPRA and all other applicable state privacy statutes, and must include, at a minimum, the provisions described in Section 9

Certain state privacy statutes define "sale" more broadly or do not distinguish between "sale" and "sharing"; in such cases, the applicable statutory definition shall control

1 Classification Tiers All data processed by Cascade and its subsidiaries must be classified into one of the following four tiers

The classification tier determines the applicable handling requirements, access controls, retention limitations, and protective measures that must be applied to the data throughout its lifecycle