Common use of Data Breaches Clause in Contracts

Data Breaches. A. Upon the discovery by the Contractor of a confirmed breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor shall provide initial notice to the Board as soon as reasonably possible, after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to Superintendent ▇▇▇▇▇▇▇ ▇. ▇▇▇▇, ▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ or to the contact currently on file and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach;‌ 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a confirmed breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for actual documented costs legally required of the Board associated with responding to the breach if caused by the Contractor as required by Public Act 16-189. D. 1. Data was released, disclosed or acquired, names of other students;

Data Breaches. A. Upon the discovery by the Contractor of a confirmed breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor shall provide initial notice to the Board as soon as reasonably possible, after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to Superintendent ▇▇▇▇▇▇▇ ▇. ▇▇▇▇, ▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ or to the contact currently on file and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach;‌breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a confirmed breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for actual documented costs legally required of the Board associated with responding to the breach if caused by the Contractor as required by Public Act 16-189. D. 1. Data was released, disclosed or acquired, names of other students;

Data Breaches. A. Upon the discovery confirmation by the Contractor of a confirmed breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor shall provide initial notice to the Board as soon as reasonably possible, but not more than thirty (30) days after confirmation of such discovery (“Initial initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to Superintendent ▇▇▇▇▇▇▇ ▇. ▇▇▇▇the Data Coordinator and Superintendent, ▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ or to the contact currently on file and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach;‌breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery confirmation by the Contractor of a confirmed breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delaydelay and at no cost to the Board, but not later than thirty (30) calendar days after discovery disclosure of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date data and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. If such breach did not impact the unauthorized release of student information, student records, or student-generated content, Contractor will notify the Board within 30 days after disclosure of such a breach. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for actual documented costs legally required with respect to investigation of the Board associated with responding breach, including but not limited to the breach if caused by the Contractor costs relating to notifications as required by Public Act 16-189. D. Notwithstanding the breach notifications required in the Article, the Contractor shall provide the board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16-189. The copy of such notice shall be provided to the Board by electronic mail on the same day that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Data Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a confirmed breach of security that results in the unauthorized release, disclosure, or acquisition of student dataStudent Data, or the suspicion that such a breach may have occurred, the Contractor shall provide initial notice to the Board as soon as reasonably possible, but not more than thirty (30) days after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to Superintendent ▇▇▇▇▇▇▇ ▇. .▇▇▇▇, ▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ or to the contact currently on file and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach;‌breach; 2. Names of student(s) whose student data Student Data was released, disclosed disclosed, or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a confirmed breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data Student Data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for actual documented costs legally required of the Board associated with responding to the breach if caused by breach, including but not limited to the Contractor costs relating to notifications as required by Public Act 16Conn. Gen. Stat. § 10-189234dd. D. 1. Data was released, disclosed or acquired, names of other students;