Common use of Personal Data Breach Notifications Clause in Contracts

Personal Data Breach Notifications. ‌ MRI shall notify the Client without undue delay after becoming aware of any personal data breach affecting the Personal Data. MRI shall (to the extent feasible) ensure that the initial notification comprises the information required under Article 33(3) of the GDPR. If MRI is unable to provide all this information in its initial notification, then MRI shall provide all further information as soon as reasonably practicable. If the breach affecting Personal Data resulted from Client’s own actions, the Client shall immediately, on demand, reimburse MRI for any costs incurred in relation to undertaking any of the remediation efforts including all costs, losses, damages, expenses or otherwise incurred by MRI to the extent that the same arise from such actions of the Client.