Common use of Breach Notifications Clause in Contracts

Breach Notifications. 7.1 Plecto maintains security incident management policies and procedures and shall, notify Subscriber without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Subscriber Data, including Personal Data, transmitted, stored or otherwise Processed by Plecto or its Sub-processors of which Plecto becomes aware (a “Customer Data Incident”). 7.2 Plecto shall make reasonable efforts to identify the cause of such Customer Data Incident and take those steps as Plecto deems necessary and reasonable in order to remediate the cause of such a Customer Data Incident to the extent the remediation is within ▇▇▇▇▇▇’s reasonable control. The obligations herein shall not apply to incidents that are caused by Subscriber or Subscriber’s Users. 7.3 Plecto are obligated, to provide the Subscriber with information about such breaches as described in 8.1, within 48 hours of the breach, so that the Subscriber can inform the supervisory authority within 72 hours, as required by Article 33 (1).

Breach Notifications. 7.1 Plecto maintains security incident management policies and procedures and shall, notify Subscriber without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Subscriber Data, including Personal Data, transmitted, stored or otherwise Processed by Plecto or its Sub-processors of which Plecto becomes aware (a “Customer Data Incident”). 7.2 Plecto shall make reasonable efforts to identify the cause of such Customer Data Incident and take those steps as Plecto deems necessary and reasonable in order to remediate the cause of such a Customer Data Incident to the extent the remediation is within ▇▇▇▇▇▇Plecto’s reasonable control. The obligations herein shall not apply to incidents that are caused by Subscriber or Subscriber’s Users. 7.3 Plecto are obligated, to provide the Subscriber with information about such breaches as described in 8.1, within 48 hours of the breach, so that the Subscriber can inform the supervisory authority within 72 hours, as required by Article 33 (1).