Breach Reporting Requirements Clause Samples

Breach Reporting Requirements. If the Contractor has actual knowledge of a confirmed data breach that affects the security of any purchasing entity’s content that is subject to applicable data breach notification law, the Contractor shall (1) as soon as possible or promptly without out reasonable delay notify the Purchasing Entity, unless shorter time is required by applicable law, and (2) take commercially reasonable measures to address the data breach in a timely manner.

Breach Reporting Requirements. If the service provider has actual knowledge of a confirmed data breach that affects the security of any City content that is subject to applicable data breach notification law, the service provider shall (1) promptly notify the appropriate City identified contact within 24 hours or sooner, unless shorter time is required by applicable law, and (2) take commercially reasonable measures to address the data breach in a timely manner.

Breach Reporting Requirements. If Contractor has actual knowledge of a confirmed Data Breach that affects the security of any State Data that is subject to applicable data breach notification law, Contractor shall: (a) promptly notify DTS within 24 hours or sooner, unless shorter time is required by applicable law; (b) take commercially reasonable measures to address the Data Breach in a timely manner; and (c) be responsible for its Data Breach responsibilities, as provided in the next Section.

Breach Reporting Requirements. If the Contractor has actual knowledge of a confirmed Data Breach that affects the security of any City content that is subject to applicable Data Breach notification law, the Contractor shall (1) promptly notify the appropriate City Identified Contact within 4 hours or sooner, unless shorter time is required by applicable law, and (2) take commercially reasonable measures to address the Data Breach in a timely manner.

Breach Reporting Requirements. As required by Utah Code ▇▇-▇▇-▇▇▇ or any other law, Contractor shall immediately notify the Eligible User of a Data Breach that affects the security of State Data.

Breach Reporting Requirements. If CLI has actual knowledge of a confirmed Data Breach that affects the security of any CUSTOMER Data that is subject to applicable Data Breach notification law, CLI shall (1) promptly notify the CUSTOMER within 2 hours or sooner, unless shorter time is required by applicable law, and (2) take commercially reasonable measures to address the Data Breach in a timely manner.

Breach Reporting Requirements. Upon becoming aware of a Data Breach or Security Incident, Contractor shall (i) Promptly notify the State identified contact within two hours of discovery or sooner, unless shorter time is required by the PA or applicable law; (ii) Fully investigate the incident and cooperate fully with the State’s investigation of and response to the incident. Except as otherwise required by law, Contractor shall not provide notice of the incident directly to individuals whose Personally Identifiable Information was involved, regulatory agencies, or other entities, without prior written permission from the State; (iii) promptly implement necessary remedial measures reasonably determined by the State; and (iv) document responsible actions taken related to the Data Breach, including any post-incident review of events and actions taken to make changes in business practices in providing the services, if necessary

Breach Reporting Requirements. If the Contractor has actual knowledge of a confirmed data breach that affects the security of the CareOregon Data that is subject to applicable data breach notification law, the Contractor shall (1) as soon as possible or promptly without out reasonable delay notify CareOregon, unless shorter time is required by applicable law, and (2) take commercially reasonable measures to address the data breach in a timely manner. (60) days in advance prior to any major update or upgrade. End of Agreement Data Handling. Contractor agrees that upon termination of the Contract it shall erase, destroy and render unrecoverable all CareOregon Data and certify in writing that these actions have been completed within thirty (30) days of the termination of the Contract or within seven (7) days of the request of the CareOregon Contract Administrator, whichever comes first. At a minimum a “Clear” media sanitation is to be performed according to the standards enumerated by the National Institute of Standards, Guidelines for media sanitation, SP800-88, Appendix A – ▇▇▇▇.▇▇▇▇.▇▇▇

Breach Reporting Requirements. If Contractor has actual knowledge of a confirmed Data Breach that affects the security of any Public Data that is subject to applicable data breach notification law, Contractor shall: a) promptly notify the Purchasing Entity or designee within 24 hours or sooner or as required by applicable law; b) take commercially reasonable measures to address the Data Breach in a timely manner and c) be responsible for its Data Breach responsibilities, as provided in the next Section. DocuSign Envelope ID: A124000A-350A-4CD9-B60B-5B4CF39A2275 State of Wisconsin (hereinafter “Participating State/Entity”) Participating State Contract 505ENT-O16-NASPOCOMPUT-16