Common use of CUSTOMER DATA INCIDENT MANAGEMENT AND NOTIFICATION Clause in Contracts

CUSTOMER DATA INCIDENT MANAGEMENT AND NOTIFICATION. Zadara maintains security incident management policies and procedures specified in Security Documentation and, to the extent required under applicable Data Protection Laws and Regulations, shall notify Customer without undue delay after becoming aware of the actual unauthorized disclosure of or access to Customer Data, or compromise of Zadara’s systems that Zadara determines is reasonably likely to result in such disclosure or access, caused by failure of Zadara's security measures and excluding any unauthorized disclosure or access that is caused by Customer or its users, including Customer or its End Users' failure to adequately secure equipment or accounts (a “Customer Data Incident”). Zadara shall make reasonable efforts to identify the cause of such Customer Data Incident and take those steps as Zadara deems necessary and reasonable in order to remediate the cause of such a Customer Data Incident to the extent the remediation is within Zadara’s reasonable control. Zadara may limit the scope of, or refrain from delivering, any disclosures to the extent reasonably necessary to avoid compromising the integrity of Zadara's security, an ongoing investigation, or any Customer’s or end user's data.