Breach Protocol. Upon becoming aware of any unlawful or unauthorized access to Student Data stored on equipment used by Contractor or in facilities used by Contractor, Contractor will take the following measures:
Breach Protocol. Upon becoming aware of any unlawful or unauthorized access to Student Data stored on equipment used by Contractor or in facilities used by Contractor, Contractor will take the following measures: promptly notify BUSD of the suspected or actual incident; promptly investigate the incident and provide District with detailed information regarding the incident, including the identity of affected users; and assist the District in notifying affected users, affected parents, legal guardians of commercially reasonable steps to mitigate the effects and to minimize any damage resulting from the incident. Upon request from District, Contractor shall reimburse BUSD for actual costs associated with notifying affected parties. Indemnification. CONTRACTOR WILL DEFEND, INDEMNIFY AND HOLD BUSD AND ITS RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES AND AGENTS, HARMLESS FROM AND AGAINST ANY AND ALL CLAIMS, SUITS, CAUSES OF ACTION, LIABILITY, LOSS, COSTS AND DAMAGES, INCLUDING REASONABLE ATTORNEY FEES, ARISING OUT OF OR RELATING TO ANY THIRD-PARTY CLAIM ARISING FROM BREACH BY CONTRACTOR OF ITS OBLIGATIONS IN THIS DPA, EXCEPT TO THE EXTENT RESULTING FROM THE ACTS OR OMISSIONS OF ED TECH JPA.
Breach Protocol. Upon becoming aware of any unlawful or unauthorized access to Student Data stored on equipment used by Contractor or in facilities used by Contractor, Contractor will take the following measures:
(a) promptly notify the District of the suspected or actual incident within a reasonable amount of time of the incident, not to exceed forty-eight hours, and shall present the information under the following headings: “What Happened,” “What Information was Involved,” “What We are Doing,” What You Can Do,” and “Persons to Contact for More Information”; and
(b) promptly investigate the incident and provide District with detailed information regarding the incident, including the identity of affected users; and
(c) assist the District in notifying affected users, affected parents, legal guardians of commercially reasonable steps to mitigate the effects and to minimize any damage resulting from the incident. Upon request from District, Contractor shall notify affected parties or reimburse District for actual costs associated with notifying affected parties.
Breach Protocol. 11.1 Within one (1) year of the establishment of the Management Committee, it shall develop a protocol document outlining procedures to be followed if there is a breach of this Schedule by any person, in accordance with the following principles: