b'Notice should be clearly posted on the ACME website. Clients should be provided with this Notice as part their engagement documents, and within a reasonable time after we makeanymaterialchangestoourpoliciesandproceduresforusingGAItools.No information related to client matters or confidential information should be processed in GAI tools prior to the client receiving this Notice. (b)Client Opt-Out Rights.Except as provided in Section 6(e), Clients have the right to restrict orprohibittheuseofGAItoolsinconnectionwiththeirmattersortoprocesstheir confidential information. A client may exercise this right at any time by providing written notice.Uponreceiptofsuchnotice,theclientspreferencesshouldbeclearlyand prominently documented in the client file. All ACME Workforce members on the file should be notified of the clients opt-out and take immediate steps to ensure that GAI tools are not used in any manner that violates the clients expressed restrictions.Accordingly, unless a client has opted out, members of the ACME Workforce may use Approved GAI Tools for the following purposes: i.De-Identified Processing. Approved GAI Tools may be used as a work assistant without inputting any personally identifiable or client confidential information. This couldincludeposinghypotheticalquestionstoanApprovedGAITooltohelp generate a checklist for drafting documents. ii.Non-Sensitive Confidential Processing.Approved GAI Tools may also be used to process client identifying or confidential information other than Sensitive Personal Informationasdefinedinthenextsection.Forexample,adocumentmaybe uploaded to an Approved GAI Tool to support efficient review of that document, provided any Sensitive Personal Information has first been redacted. (c)SensitivePersonalInformation.PriortousinganApprovedGAITooltoprocess Sensitive Personal Information, as defined below, ACME must obtain the clients informed written consent using the procedure described in Section 6(d). For the purposes of this Policy, Sensitive Personal Information includes: Social security numbers or tax returnsDrivers license numbers or state identification card numbersAccount, credit card, or debit card numbersMedical information, including mental health or substance abuse treatment records Health insurance informationUnique biometric identifiers or biometric information (as defined in Illinois law) Passwords and security questions and answers used to access computer accountsAny other information meeting PIPAs definition of personal information, even if separated from a first name or first initial in combination with last namePage | 43'