Common use of Notification of Data Security Incident Clause in Contracts

Notification of Data Security Incident. For purposes of this section, “Data Security Incident” is defined as unauthorized access to the CONSULTANT’s business, business records, and/or business systems by a third party, which access could potentially expose County records, data, or systems to unauthorized access, disclosure, or misuse. In the event of a Data Security Incident, CONSULTANT must notify County within 48 hours. Notice under this section must include the date of incident and CONSULTANT’s systems and/or locations which were affected. The duty to notify under this section is broad, requiring disclosure whether or not any impact to County data is known at the time, to enable County to take immediate protective actions of its records, data, and cloud environments. Failure to notify under this section is a material breach, and County may immediately terminate the Agreement for failure to comply.

Notification of Data Security Incident. For purposes of this section, “Data Security Incident” is defined as unauthorized access to the CONSULTANTConsultant’s business, business records, and/or business systems by a third party, which access could potentially expose County records, data, or systems to unauthorized access, disclosure, or misuse. In the event of a Data Security Incident, CONSULTANT Consultant must notify County within 48 hours. Notice under this section must include the date of incident and CONSULTANTConsultant’s systems and/or locations which were affected. The duty to notify under this section is broad, requiring disclosure whether or not any impact to County data is known at the time, to enable County to take immediate protective actions of its records, data, and cloud environments. Failure to notify under this section is a material breach, and County may immediately terminate the Agreement for failure to comply.

Notification of Data Security Incident. For purposes of this section, “Data Security Incident” is defined as unauthorized access to the CONSULTANTContractor’s business, business records, and/or business systems by a third party, which access could potentially expose County records, data, or systems to unauthorized access, disclosure, or misuse. In the event of a Data Security Incident, CONSULTANT Contractor must notify County within 48 hours. Notice under this section must include the date of incident and CONSULTANTContractor’s systems and/or locations which were affected. The duty to notify under this section is broad, requiring disclosure whether or not any impact to County data is known at the time, to enable County to take immediate protective actions of its records, data, and cloud environments. Failure to notify under this section is a material breach, and County may immediately terminate the Agreement for failure to comply.