DATA SECURITY AND BREACH NOTIFICATION Sample Clauses
The Data Security and Breach Notification clause establishes the obligations of parties to protect sensitive information and to promptly notify relevant stakeholders in the event of a data breach. Typically, this clause requires the implementation of reasonable security measures, such as encryption and access controls, and mandates timely notification to affected individuals or authorities if unauthorized access or disclosure occurs. Its core function is to ensure accountability and transparency in handling data, thereby minimizing harm and legal exposure resulting from security incidents.
POPULAR SAMPLE Copied 1 times
DATA SECURITY AND BREACH NOTIFICATION. The parties agree to document, deploy, and maintain appropriate safeguards designed to protect the security, confidentiality, and integrity of Oracle Data and Your Content in their control. Oracle will protect Your Content as described in the Oracle Hosting and Delivery Policies (which describe the administrative, physical, technical, and other safeguards applied to Your Content in the Services and describe aspects of system management applicable to the Services) available at ▇▇▇.▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇ (or other such applicable policy) incorporated into Your order. If either party misappropriates, loses, or impermissibly alters, discloses, or compromises the security of Your Content (with respect to Oracle), Oracle Data, or Oracle Materials (with respect to You) (a “Security Breach”), such party will notify the other within twenty-four (24) hours (or sooner if required by applicable Rules). The parties agree to provide each other information during a Security Breach (and thereafter) that may be required by a supervisory authority or affected data subject in accordance with the Rules.
DATA SECURITY AND BREACH NOTIFICATION. Each party will document, implement, and maintain appropriate safeguards designed to protect the security, confidentiality, and integrity of Oracle Data and Your Content within its control. Oracle will protect Your Content as described in the Oracle Hosting and Delivery Policies (which describe the administrative, physical, technical, and other safeguards applied to Your Content in the Services and describe aspects of system management applicable to the Services) available at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇.▇▇▇/corporate/contracts/data-services/index.html (or other such applicable policy) incorporated into Your order. If either party becomes aware of and determines that Oracle Data or Your Content received from the other party (as applicable) is subject to misappropriation, accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access that compromises the security, confidentiality or integrity of such information (a “Security Breach”), then such party will notify the other party without undue delay but at the latest within twenty-four (24) hours (or sooner if required by applicable Rules). Oracle and You agree to provide each other, as applicable, with information that either party may be required to disclose to a supervisory authority or affected data subject in accordance with the Rules.
DATA SECURITY AND BREACH NOTIFICATION. We will implement commercially reasonable administrative, physical and technical safeguards designed to secure Customer Property and PI, including Student Data, from unauthorized access, disclosure or use, which could include where commercially reasonable or to the extent required by Law, data encrypting, firewalls, and physical access controls to buildings and files. In the event we have a reasonable, good faith belief that an unauthorized party has gained access to or been disclosed PI, including Student Data, that you have provided us or that we have collected on your behalf under the Agreement, we will promptly, or if required by Law in such other time required by such Law, notify you and will use reasonable efforts to cooperate with your investigation of the incident. If such incident triggers any third-party notice requirements under Laws, you agree that unless otherwise required by Law, as the owner of the PI, you will be responsible for the timing, content, cost and method of any such notice and compliance with such Laws.
DATA SECURITY AND BREACH NOTIFICATION. (1) The Platform shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of the Personal Data processed. In the event of a Personal Data breach, the Platform shall notify the appropriate supervisory authority and the Artist without undue delay, in accordance with GDPR and other applicable data protection laws.
DATA SECURITY AND BREACH NOTIFICATION. K12 Insight has implemented administrative, physical, and technical safeguards designed to secure the Student Data in K12 Insight’s possession and control from unauthorized access, disclosure, and use. In the event that an unauthorized party gains access to or has been disclosed personal information (a “Security Incident”), K12 Insight shall promptly notify the School Client. If, due to a Security Incident which is caused by the acts or omissions of K12 Insight or its agents, a notification to an individual, organization or government agency is required under applicable privacy laws, the School Client shall be responsible for the timing, content, and method of any such legally- required notice and compliance with such laws and K12 Insight shall indemnify the School Client for the reasonable costs related to legally-required notifications. With respect to any Security Incident which is not caused by the acts or omissions of K12 Insight or its agents, K12 Insight shall reasonably cooperate with your investigation of the Security Incident, at the School Client’s request and at your reasonable expense, but K12 Insight shall not indemnify the School Client for costs associated with the Security Incident.
DATA SECURITY AND BREACH NOTIFICATION. We have implemented administrative, physical and technical safeguards designed to secure the personal information in IXL's possession and control from unauthorized access, disclosure and use. If an unauthorized party gains access to or has been disclosed Student Data (a "Security Event"), that we have collected or received through the Service under this Agreement, we will promptly notify the School. If, due to a Security Event which is caused by the acts or omissions of IXL or its agents, a notification to an individual, organization or government agency is required under applicable privacy laws, the School shall be responsible for the timing, content, and method of any such legally- required notice and compliance with such laws and IXL shall indemnify the School for reasonable costs related to legally-required notifications. With respect to any Security Event which is not caused by the acts or omissions of IXL or its agents, IXL shall reasonably cooperate with School's investigation of the Security Event, as School requests, at School's reasonable expense, but IXL shall not indemnify a School for costs associated with the Security Event. IXL shall be responsible for the timing, content, cost and method of notice and compliance with such laws as they relate to users that are not associated with a School account.
DATA SECURITY AND BREACH NOTIFICATION. 4.1 The Contractor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks presented by the Processing of Personal Data pursuant to this Contract, including (without limitation) the risks presented by a Personal Data Breach. Such measures shall include (without limitation):
a) the pseudonymisation and encryption of Personal Data where appropriate in accordance with good industry practice;
b) measures to ensure the on-going confidentiality, integrity, availability and resilience of the systems used for Processing and the provision of the Services;
c) measures to restore the availability and access to Personal Data in a timely manner in the event of a physical or technical incident;
d) a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the Processing; and
e) such other security measures as are set out in Appendix C and Schedule 9 (Security Requirements and Plan).
4.2 The Contractor shall notify the Authority in writing within 24 hours if it becomes aware of:
a) any Personal Data Breach (whether caused by the Contractor or otherwise); and/or
b) any advance in technology and methods of working or potential security threats which mean that the Parties should revise the security measures taken by the Contractor to comply with its obligations under this Paragraph 4 (including as set out in Appendix C) or as set out in Schedule 9 (Security Requirements and Plan).
4.3 Where the Contractor notifies the Authority of advances in technology or methods of working or potential security threats that mean the Parties should revise the security measures set out in Appendix C, the Parties shall agree appropriate changes to Appendix C in accordance with the Change Control Procedure.
4.4 Where a Personal Data Breach occurs the Contractor shall provide such information and assistance and take such steps as the Authority may reasonably require to enable the Authority:
a) to mitigate the impact of the Personal Data Breach;
b) to ensure that Personal Data Breaches of the same nature do not occur again;
c) to notify the competent regulatory body of the Personal Data Breach; and/or
d) to notify Data Subjects of the Personal Data Breach.