Notification of personal data breach Sample Clauses
POPULAR SAMPLE Copied 2 times
Notification of personal data breach. 10.1 In case of any personal data breach, the data processor shall, without undue delay after having become aware of it, notify the data controller of the personal data breach.
10.2 The data processor's notification to the data controller shall, if possible, take place within 24 hours after the data processor has become aware of the personal data breach to enable the data con- troller to comply with the data controller's obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33
Notification of personal data breach. In case of any personal data breach, the Data Processor shall, without undue delay after having become aware of it, notify the Data Controller of the personal data breach.
Notification of personal data breach. 1. In case of any personal data breach, the data processor shall, without undue delay after having become aware of it, notify the data controller of the personal data breach.
2. The data processor’s notification to the data controller shall, if possible, take place within 24 hours after the data processor has become aware of the personal data breach to enable the data controller to comply with the data controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33
Notification of personal data breach. 1. In case of a personal data breach, the Data Processor must, without undue delay after having become aware of it, notify the Data Controller of the personal data breach.
2. The Data Processor’s notification to the Data Controller should, if possible, take place within 48 hours after the Data Processor has become aware of the personal data breach to enable the Data Controller to comply with the Data Controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33 of the GDPR.
3. In accordance with Term 9(2)(a), the Data Processor must assist the Data Controller in notifying the personal data breach to the competent supervisory authority, meaning that the Data Processor is required to assist in obtaining the information listed below which, pursuant to Article 33(3) of the GDPR, must be stated in the Data Controller’s notification to the competent supervisory authority:
a. The nature of the personal data including where possible, the categories and approximate number of Data Subjects concerned and the categories and approximate number of personal data records concerned;
b. the likely consequences of the personal data breach;
c. the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.
4. All the elements to be provided by the Data Processor when assisting the Data Controller in the noti- fication of a personal data breach to the competent supervisory authority are specified in Appendix D.
Notification of personal data breach. In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 Regulation (EU) 2016/679 or under Articles 34 and 35 Regulation (EU) 2018/1725, where applicable, taking into account the nature of processing and the information available to the processor.
Notification of personal data breach. In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 of Regulation (EU) 2016/679 or [for GH being an EC/EU only] under Articles 34 and 35 of Regulation (EU) 2018/1725, where applicable, taking into account the nature of processing and the information available to the processor.
Notification of personal data breach. In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 of Regulation (EU) 2016/679, where applicable, taking into account the nature of processing and the information available to the processor.
9.1 Data breach concerning data processed by the controller
a) in notifying the personal data breach to the competent supervisory authority/ies, without undue delay after the controller has become aware of it, where relevant (unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons);
b) in obtaining the following information which, pursuant to Article 33(3) of Regulation (EU) 2016/679, shall be stated in the controller’s notification, and must at least include:
1) the nature of the personal data including where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned;
2) the likely consequences of the personal data breach;
3) the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects. Where, and insofar as, it is not possible to provide all this information at the same time, the initial notification shall contain the information then available and further information shall, as it becomes available, subsequently be provided without undue delay.
c) in complying, pursuant to Article 34 of Regulation (EU) 2016/679, with the obligation to communicate without undue delay the personal data breach to the data subject, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons.
9.2 Data breach concerning data processed by the processor
a) a description of the nature of the breach (including, where possible, the categories and approximate number of data subjects and data records concerned);
b) the details of a contact point where more information concerning the personal data breach can be obtained;
c) its likely consequences and the measures taken or proposed to be taken to address the breach, including to mitigate its possible adverse effects. Where, and insofar as, it is not possible to provide all this information at the same time, the initial notification shall contain the information then available and further information shall, as it bec...
Notification of personal data breach. 9.1. On discovery of a Personal Data breach at the Data Processor’s facilities or a Sub-Processor’s facilities (“Security Incident”), the Data Processor shall as soon as reasonably practicable notify the Data Controller.
9.2. The Data Processor’s notification to the Data Controller shall, if possible, take place within forty-eight
Notification of personal data breach. The Contractor notifies the Company of all the Personal Data Breaches without undue delay after the Contractor becomes aware of or its Sub-Processor becomes aware of the Personal Data Breach, but not later than within 24 (twenty-four) hours from the moment when the Contractor or the Sub-Processor becomes aware of the Personal Data Breach. If requested by the Company, the Contractor must without undue delay provide the Company with all appropriate information of the Personal Data Breach. To the extent that this information is held by the Contractor, the notification must describe at least: the Personal Data Breach that has taken place; as far as possible, the categories and approximate number of data subjects concerned and the categories and approximate number of the Personal Data records concerned; description of the likely consequences of the Personal Data Breach; description of the remedial actions that the Contractor has taken or must take to prevent future Personal Data Breach and, if necessary, also measures to mitigate its possible adverse effects; the name and contact details of the data protection officer or other contact point where more information can be obtained; and any other necessary and available information that the Company needs in order to be able to take appropriate safeguards and meet its obligations of notification of a Personal Data Breach to the supervisory authority and, if applicable, to the affected data subjects. The Contractor must without delay document the results of the investigation and the actions taken for the Company, comprising the facts relating to the Personal Data Breach, its effects and the remedial action taken. The Company is responsible for necessary notifications to the supervisory authorities.
Notification of personal data breach. 7.1 In case of any Personal Data breach, the Supplier shall notify the Customer of the Personal Data breach without undue delay after the Supplier has become aware of the Personal Data breach to enable the Customer to comply with the Customer’s obligation to notify the Personal Data breach to the competent supervisory.
7.2 In accordance with Section 6.2 a), the Supplier shall assist the Customer in notifying the Personal Data breach to the competent Supervisory Authority, meaning that the Supplier is required to assist in obtaining the information listed below which, pursuant to Article 33(3) GDPR, shall be stated in the Customer’s notification to the competent Supervisory Authority:
a) The nature of the Personal Data including where possible, the categories and approximate number of Data Subjects concerned and the categories and approximate number of Personal Data records concerned;
b) the likely consequences of the Personal Data breach;
c) the measures taken or proposed to be taken by the controller to address the Personal Data breach, including, where appropriate, measures to mitigate its possible adverse effects.