Actions Following Disclosure. Immediately upon discovery of a compromise or improper use of government information, Contractor shall take such action as may be necessary to preserve forensic evidence and eliminate the cause of the compromise or improper use. As soon as practicable, but no later than twenty-four hours after discovery, Contractor shall notify State Agency/Using Governmental Unit of the compromise or improper use, including a description of the circumstances of the use or compromise. As soon as practicable after discovery, Contractor shall undertake a thorough forensic investigation of any compromise or improper use and provide the State Agency/Using Governmental Unit all information necessary to enable the State Agency/Using Governmental Unit to fully understand the nature and extent of the compromise or improper use. With regard to any compromise or improper use of government information, Contractor shall: (1) provide any notification to third parties legally required to be provided such notice by Contractor, and if not (e.g., if legally required of the State Agency/Using Governmental Unit), Contractor shall reimburse State Agency/Using Governmental Unit for the cost of providing such notifications; (2) pay all costs and expenses for at least two years of identity theft monitoring services (including without limitation, credit monitoring) and identity theft restoration services for any such affected individuals receiving notice where such services are appropriate given the circumstances of the incident and the nature of the information compromised; (3) undertake any other measures that are customary and reasonable for an entity to take when experiencing a similar disclosure, (4) pay any related fines or penalties imposed on the State Agency/Using Governmental Unit, and (5) reimburse the State Agency/Using Governmental Unit all costs reasonably incurred for communications and public relations services involved in responding to the compromise or improper us. Notwithstanding any other provision, contractor’s obligations pursuant to this item (h) are without limitation.
Actions Following Disclosure. Immediately upon discovery of a compromise or improper use of government information, Contractor shall take such action as may be necessary to preserve forensic evidence and eliminate the cause of the compromise or improper use. As soon as practicable, but no later than twenty-four hours after discovery, Contractor shall notify State Agency/Using Governmental Unit of the compromise or improper use, including a description of the circumstances of the use or
