Breach of Personal Data Sample Clauses

Breach of Personal Data. In case of a breach of Personal Data, each Party shall inform the other without undue delay, and at the latest forty-eight (48) hours after having become aware of it. The notification shall include the information listed under article 33 of the GDPR. Each Party notifies on its own the breach to its competent authority. The Parties shall cooperate in order to determine if the breach needs to be communicated to the Data subjects, that is, if the breach may result in a high risk to the rights and freedom of a natural person. If so, the Parties shall meet in order to determine the modalities and the content of the communication to be conducted with the Data subjects.
AutoNDA by SimpleDocs
Breach of Personal Data. In the event of a Data Loss Event arising during the performance of the Services by the Supplier, Supplier shall, notify the Buyer about the Data Loss Event in accordance with section 6(f) of Schedule 4 of the Framework Agreement (incorporated by Part B Clause 2.1 of the Call-Off Contract), providing the following:
Breach of Personal Data. You confirm that in the event of a Personal Data Breach which involves Four Media Network GmbH Personal Data you will: • Promptly take all necessary and appropriate corrective action to remedy the underlying causes of the Personal Data Breach and make reasonable commercial efforts to ensure that such Personal Data Breach will not recur. • Notify Four Media Network GmbH without delay, and in any event within twenty-four (24) hours, providing reasonable detail of the Personal Data Breach and likely impact on Data Subjects. • Take any action required by Applicable Law and/or at the reasonable request of Four Media Network GmbH. Four Media Network GmbH shall make the final decision on notifying (including the contents of such notice) Four Media Network GmbH’s clients, employees, service providers, Data Subjects and/or the general public of such Personal Data Breach, and the implementation of the remediation plan, to the extent Four Media Network GmbH Personal Data is concerned. You will ensure that any Four Media Network GmbH Personal Data in your possession is returned to Four Media Network GmbH or destroyed, each at Four Media Network GmbH’s election, when it is no longer required for the performance of the Services agreed, or within a reasonable time taking into consideration the type of Personal Data. You confirm you have the means and will take all reasonable action to allow us to comply with reasonable requests from Data Subjects (in relation their rights under Article 12-22 of GDPR) if we have shared their Personal Data with you. You confirm you will not share any sensitive/special categories of Personal Data, as defined in Article 9 and 10 of GDPR, with Four Media Network GmbH unless expressly agreed in writing. You confirm you will not transfer, and will ensure that any subcontractor does not transfer, Four Media Network GmbH Personal Data out of the country in which it is provided to you, except 1. between member states of the European Economic Area (“EEA”); or 2. on the written instructions of Four Media Network GmbH. If you transfer Four Media Network GmbH Personal Data outside of the EEA, you will promptly enter (or require, in the case of a transfer by or to a subcontractor, that that subcontractor promptly enters) into an agreement with the relevant parties on appropriate EU Model Clauses or equivalent. Any transfer by you of Personal Data to Four Media Network GmbH agencies outside of the EEA will be made on relevant EU Model Clauses. You confi...
Breach of Personal Data. ‌‌ 3.6.1 In the event of a Breach arising during the provision of the Accept- ance Services or other Products and Services for which Worldline quali- fies as the Data Processor, Worldline will, without undue delay but no later than 48 hours after having established whether a Breach has occurred, notify Merchant about the Breach and provide any relevant information, including, to the extent that this information is already avail- able, a description of the categories and approximate number of Data Subjects as well as the categories and approximate number of Personal Data records affected by the Breach. Worldline will provide resources and assistance as required by Merchant. Worldline’s notification of the Breach can in no case be construed as acknowledgement of fault or lia- bility for said Breach.
Breach of Personal Data. In all cases where there is a Breach or suspected Breach of Personal Data for which inidus acts as Data Processor, inidus will: 1. Notify the Data Controller without undue delay, after becoming aware of a Breach of Personal Data.
Breach of Personal Data. A breach of Personal Data (“Breach”) shall be deemed to mean any breach of security suffered or committed by Institution and Clinician in the performance of the Registry leading accidentally or unlawfully to the destruction, loss, alteration or unauthorized disclosure to a third party or access by a third party to Personal data. In the event of a Breach that compromises the security, privacy, confidentiality or integrity of such Personal Data, Institution and Clinician shall at their own costs: i. immediately notify Sponsor about the Breach and detail in the notification the nature of the Breach, the categories and approximate number of Data subjects concerned, the categories and approximate number of Personal Data records concerned and the likely consequences of the Breach, ii. after investigating the causes of such Breach, take such actions to minimize the effects of any Breach, iii. shall record of all information relating to the Breach, including the results of their own investigations and investigations by authorities, iv. cooperate with Sponsor and take all measures as necessary to prevent future Breaches. o zabezpečení osobních údajů pro spolupracovníky, včetně pracovníků klinické studie. C. Porušení zabezpečení osobních údajů Porušením zabezpečení osobních údajů („porušení”) se rozumí jakékoli porušení zabezpečení utrpěné nebo spáchané zdravotnickým zařízením a klinickým pracovníkem při provádění činností registru vedoucí k náhodnému nebo protiprávnímu zničení, ztrátě, změně nebo neoprávněnému poskytnutí nebo zpřístupnění osobních údajů třetí straně. V případě porušení, které ohrožuje bezpečnost, soukromí, důvěrnost nebo integritu takových osobních údajů, zdravotnické zařízení a klinický lékař na své vlastní náklady: i.Neprodleně ohlásí zadavateli toto porušení a v tomto ohlášení podrobně uvedou povahu porušení, kategorie a přibližný počet dotčených subjektů údajů, kategorie a přibližné množství dotčených záznamů osobních údajů a pravděpodobné důsledky porušení, ii. Po vyšetření příčin tohoto porušení přijmou opatření k minimalizaci dopadů jakéhokoli porušení, iii. Zaznamenají veškeré informace související s porušením, včetně výsledků svých vlastních vyšetřování a vyšetřování ze strany orgánů, iv. Spolupracují se zadavatelem a přijímají veškerá opatření nezbytná k předcházení porušení v budoucnu.
Breach of Personal Data. A Personal Data Breach is defined as as breach of security leading to the accidental or unlawful destruction, loss alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. Partners will adhere to the following procedure if there is a breach of personal data by a Partner or a third party who has received information under this agreement. Examples of breaches include, but are not restricted to, the following: • The loss, theft or misuse of data or information. • The transfer or disclosure of data or information to those who are not entitled to receive that information. • Attempts (either failed or successful) to gain unauthorised access to data or the system. • Changes to information or data or system hardware, firmware, or software characteristics without proper authorisation or consent. • Unwanted disruption or denial of service to the system. • The unauthorised use of the system for the processing or storage of data by any person. The relevant Data Protection Officer (DPO) for each Partner is responsible for reporting high-risk breaches to the Information Commissioner Office (ICO) without undue delay, but no later than 72 hours after having become aware of the breach. Where such a breach presents a high risk to the rights and freedoms of the data subjects, the affected organisation must also inform the individual/s without undue delay. All breaches, including those unlikely to result in a risk to the data subject, must be reported to the originating Partner(s). This must take place without undue delay in order for all relevant Partners to mitigate any ongoing risks to the data subjects. All breaches will be recorded and investigated by the partners involved and Leicestershire Police will be consulted and determine whether any criminal investigation is required. The contact details for the post holder who should be notified for each partner is recorded in the signatories table. The outcome and learning from any investigation will be circulated to all Partners. Disciplinary action must be considered against any member of staff found to have been responsible for the breach by the employing Partner, with the Information Commissioner being notified of the breach and any action taken if the breach is serious. Partners will seek to ensure that consistency is applied in these matters.
AutoNDA by SimpleDocs
Breach of Personal Data. In all cases where there is a Breach or suspected Breach of Personal Data for which the User acts as Data Controller, the User will:

Related to Breach of Personal Data

  • Notification of personal data breach 1. In case of any personal data breach, the data processor shall, without undue delay after having become aware of it, notify the data controller of the personal data breach. 2. The data processor’s notification to the data controller shall, if possible, take place within 24 hours after the data processor has become aware of the personal data breach to enable the data controller to comply with the data controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33

  • Protection of Personal Data 25.1 The Parties agree that they may obtain and have access to personal data for the duration of the Agreement for the fulfilment of the rights and obligations contained herein. In performing the obligations as set out in this Agreement, the Parties shall at all times ensure that: a) they process data only for the express purpose for which it was obtained; b) once processed for the purposes for which it was obtained, all data will be destroyed to an extent that it cannot be reconstructed to its original form; c) data is provided only to authorised personnel who strictly require the personal data to carry out the Parties’ respective obligations under this Agreement; d) they do not disclose personal data of the other Party, other than in terms of this Agreement; e) they have all reasonable technical and organisational measures in place to protect all personal data from unauthorised access and/or use; f) they have appropriate technical and organisational measures in place to safeguard the security, integrity and authenticity of all data in its possession or under its control in terms of this Agreement; g) such personal data is protected against unauthorised or unlawful processing, accidental loss, destruction or damage, alteration, disclosure or access. 25.2 The Parties agree that if personal data will be processed for additional purposes beyond the original purpose for which it was obtained, explicit consent must be obtained beforehand from those persons whose information will be subject to further processing. 25.3 Should it be necessary for either Party to disclose or otherwise make available the personal data to any third party (including sub-contractors and employees), it may do so only with the prior written permission of the other Party. The Party requiring such permission shall require of all such third parties, appropriate written undertakings to be provided, containing similar terms to that set forth in this clause 25, and dealing with that third party's obligations in respect of its processing of the personal data. Following approval by the other Party, the Party requiring permission agrees that the provisions of this clause 25 shall mutatis mutandis apply to all authorised third parties who process personal data. 25.4 The Parties shall ensure that any persons authorized to process data on their behalf (including employees and third parties) will safeguard the security, integrity and authenticity of all data. Where necessary to meet this requirement, the Parties shall keep all personal data and any analyses, profiles, or documents derived therefrom logically separated from all other data and documentation held by it. 25.5 The Parties shall carry out regular assessments to identify all reasonably foreseeable internal and external risks to the personal data in its possession or under its control. The Parties shall implement and maintain appropriate safeguards against the risks which it identifies and shall also regularly verify that the safeguards which it has in place has been effectively implemented. 25.6 The Parties agree that they will promptly return or destroy any personal data in their possession or control which belongs to the other Party once it no longer serves the purpose for which it was collected in relation to this Agreement, subject to any legal retention requirements. This may be at the request of the other Party and includes circumstances where a person has requested the Parties to delete all instances of their personal data. The information will be destroyed in such a manner that it cannot be reconstructed to its original form, linking it to any particular individual or organisation.

  • Personal Data Breach 7.1 Processor shall notify Company without undue delay upon Processor becoming aware of a Personal Data Breach affecting Company Personal Data, providing Company with sufficient information to allow the Company to meet any obligations to report or inform Data Subjects of the Personal Data Breach under the Data Protection Laws. 7.2 Processor shall co-operate with the Company and take reasonable commercial steps as are directed by Company to assist in the investigation, mitigation and remediation of each such Personal Data Breach.

  • Personal Data Breach Notification SAP will notify Customer without undue delay after becoming aware of any Personal Data Breach and provide reasonable information in its possession to assist Customer to meet Customer’s obligations to report a Personal Data Breach as required under Data Protection Law. SAP may provide such information in phases as it becomes available. Such notification shall not be interpreted or construed as an admission of fault or liability by SAP.

  • Personal Data Breaches 5.7.1 The Data Processor shall give immediate notice to the Data Controller if a breach occurs, that can lead to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to, personal data transmitted, stored or otherwise processed re the Personal Data processed on behalf of the Data Controller (a “Personal Data Breach”). 5.7.2 The Data Processor shall make reasonable efforts to identify the cause of such a breach and take those steps as they deem necessary to establish the cause, and to prevent such a breach from reoccurring.

  • Use of Personal Data By executing this Stock Agreement, Participant acknowledges and agrees to the collection, use, processing and transfer of certain personal data, including his or her name, salary, nationality, job title, position and details of all past Awards and current Awards outstanding under the Plan (“Data”), for the purpose of managing and administering the Plan. The Participant is not obliged to consent to such collection, use, processing and transfer of personal data, but a refusal to provide such consent may affect his or her ability to participate in the Plan. The Company, or its Subsidiaries, may transfer Data among themselves or to third parties as necessary for the purpose of implementation, administration and management of the Plan. These various recipients of Data may be located elsewhere throughout the world. The Participant authorizes these various recipients of Data to receive, possess, use, retain and transfer the Data, in electronic or other form, for the purposes of implementing, administering and managing the Plan. The Participant may, at any time, review Data with respect to the Participant and require any necessary amendments to such Data. The Participant may withdraw his or her consent to use Data herein by notifying the Company in writing; however, the Participant understands that by withdrawing his or her consent to use Data, the Participant may affect his or her ability to participate in the Plan.

  • Processing of Personal Data 1.1. With regard to the Processing of Personal Data, You are the controller and determine the purposes and means of Processing of Personal Data You provide to Us (“Controller”) and You appoint Us as a processor (“Processor”) to process such Personal Data (hereinafter, “Data”) on Your behalf (hereinafter, “Processing”). 1.2. The details of the type and purpose of Processing are defined in the Exhibits attached hereto. Except where the DPA stipulates obligations beyond the Term of the Agreement, the duration of this DPA shall be the same as the Agreement Term. 1.3. You shall be solely responsible for compliance with Your obligations under the applicable Data Protection Laws, including, but not limited to, the lawful disclosure and transfer of Personal Data to Us by upload of source data into the Cloud Service or otherwise. 1.4. Processing shall include all activities detailed in this Agreement and the instructions issued by You. You may, in writing, modify, amend, or replace such instructions by issuing such further instructions to the point of contact designated by Us. Instructions not foreseen in or covered by the Agreement shall be treated as requests for changes. You shall, without undue delay, confirm in writing any instruction issued orally. Where We believe that an instruction would be in breach of applicable law, We shall notify You of such belief without undue delay. We shall be entitled to suspend performance on such instruction until You confirm or modify such instruction. 1.5. We shall ensure that all personnel involved in Processing of Customer Data and other such persons as may be involved in Processing shall only do so within the scope of the instructions. We shall ensure that any person Processing Customer Data is subject to confidentiality obligations similar to the confidentiality terms of the Agreement. All such confidentiality obligations shall survive the termination or expiration of such Processing.

  • Protection of Personal Information Party agrees to comply with all applicable state and federal statutes to assure protection and security of personal information, or of any personally identifiable information (PII), including the Security Breach Notice Act, 9 V.S.A. § 2435, the Social Security Number Protection Act, 9 V.S.A. § 2440, the Document Safe Destruction Act, 9 V.S.A. § 2445 and 45 CFR 155.260. As used here, PII shall include any information, in any medium, including electronic, which can be used to distinguish or trace an individual’s identity, such as his/her name, social security number, biometric records, etc., either alone or when combined with any other personal or identifiable information that is linked or linkable to a specific person, such as date and place or birth, mother’s maiden name, etc.

  • Transfer of Personal Data The Participant authorizes, agrees and unambiguously consents to the transmission by the Company (or any Subsidiary) of any personal data information related to the RSUs awarded under this Agreement for legitimate business purposes (including, without limitation, the administration of the Plan). This authorization and consent is freely given by the Participant.

  • Collection of Personal Information 10.1 The Subscriber acknowledges and consents to the fact that the Issuer is collecting the Subscriber’s personal information for the purpose of fulfilling this Agreement and completing the Offering. The Subscriber acknowledges that its personal information (and, if applicable, the personal information of those on whose behalf the Subscriber is contracting hereunder) may be included in record books in connection with the Offering and may be disclosed by the Issuer to: (a) stock exchanges or securities regulatory authorities, (b) the Issuer's registrar and transfer agent, (c) tax authorities, (d) authorities pursuant to the PATRIOT Act (U.S.A.) and (e) any of the other parties involved in the Offering, including the Issuer’s Counsel. By executing this Agreement, the Subscriber is deemed to be consenting to the foregoing collection, use and disclosure of the Subscriber's personal information (and, if applicable, the personal information of those on whose behalf the Subscriber is contracting hereunder) for the foregoing purposes and to the retention of such personal information for as long as permitted or required by applicable laws. Notwithstanding that the Subscriber may be purchasing the Note as agent on behalf of an undisclosed principal, the Subscriber agrees to provide, on request, particulars as to the nature and identity of such undisclosed principal, and any interest that such undisclosed principal has in the Issuer, all as may be required by the Issuer in order to comply with the foregoing. 10.2 Furthermore, the Subscriber is hereby notified that the Issuer may deliver to any government authority having jurisdiction over the Issuer, the Subscriber or this Subscription, including the SEC and/or any state securities commissions, certain personal information pertaining to the Subscriber, including the Subscriber’s full name, residential address and telephone number, the number of Shares or other securities of the Issuer owned by the Subscriber, the principal amount of Note purchased by the Subscriber, the total Subscription Amount paid for the Note and the date of distribution of the Note.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!