Common use of Breach Notification and Remediation Clause in Contracts

Breach Notification and Remediation. In the event of an actual security breach incident involving Computershare’s systems or network that has resulted in unauthorized access to or disclosure of, or have any material adverse effect on, Customer Confidential Information (“Incident”), Computershare shall: a. Within two business days after the confirmation by Computershare of the occurrence of an Incident, notify a Lead for Global Provider Services (as defined in Schedule 4 of the Side Agreement) by telephone and subsequently in writing. Notice shall include the approximate date and time of the Incident and a summary of all relevant facts along with the actions taken to rectify the Processes and address the Incident’s effects. An Incident may include, but is not limited to, instances in which Computershare’s personnel (“Computershare Personnel”) access systems in excess of their user rights or otherwise use the systems inappropriately; b. Immediately implement commercially reasonable measures necessary to ensure the security of Computershare’s systems and restore the security of Customer Confidential Information. If such measures include temporarily restricting access to any of Computershare’s information, network or systems in order to mitigate against further breaches, Computershare shall notify Customer of the restricted access, in advance of such restriction when possible but in all cases as soon as possible. Customer may request additional steps of Computershare relating to Computershare’s Processes and to address the Incident’s effects. In the event of an Incident, Computershare shall reasonably cooperate with Customer in order for Customer to verify Computershare’s compliance with its obligations under this section (ii)(b).