Data Breach; Loss of City Data Sample Clauses
Data Breach; Loss of City Data. In the event of any Data Breach, act, SaaS Software Error, omission, negligence, misconduct, or breach that compromises or is suspected to compromise the security, confidentiality, or integrity of City Data or the physical, technical, administrative, or organizational safeguards put in place by Contractor that relate to the protection of the security, confidentiality, or integrity of City Data, Contractor shall, as applicable:
(a) Notify City immediately following discovery, but no later than twenty-four (24) hours, of becoming aware of such occurrence or suspected occurrence. Contractor’s report shall identify:
(i) the nature of the unauthorized access, use or disclosure;
(ii) the Confidential Information accessed, used or disclosed;
(iii) the person(s) who accessed, used, disclosed and/or received protected information (if known);
(iv) what Contractor has done or will do to mitigate any deleterious effect of the unauthorized access, use or disclosure, and
(v) what corrective action Contractor has taken or will take to prevent future unauthorized access, use or disclosure.
(b) In the event of a suspected Breach, Contractor shall keep the City informed regularly of the progress of its investigation until the uncertainty is resolved;
(c) Contractor shall coordinate with the City in its breach response activities including without limitation:
(i) Immediately preserve any potential forensic evidence relating to the breach, and remedy the breach as quickly as circumstances permit;
(ii) Promptly (within 2 business days) designate a contact person to whom the City will direct inquiries, and who will communicate Contractor responses to City inquiries;
(iii) As rapidly as circumstances permit, apply appropriate resources to remedy the breach condition, investigate, document, restore City service(s) as directed by the City, and undertake appropriate response activities;
(iv) Provide status reports to the City on Data Breach response activities, either on a daily basis or a frequency approved by the City;
(v) Make all reasonable efforts to assist and cooperate with the City in its Breach response efforts;
(vi) Ensure that knowledgeable Contractor staff are available on short notice, if needed, to participate in City-initiated meetings and/or conference calls regarding the Breach; and
(vii) Cooperate with City in investigating the occurrence, including making available all relevant records, logs, files, data reporting, and other materials required to comply with appl...
Data Breach; Loss of City Data. The Agency shall notify City immediately by telephone call plus email upon the discovery of a breach (as herein). For purposes of this Section, breaches and security incidents shall be treated as discovered by Agency as of the first day on which such breach or security incident is known to the Agency, or, by exercising reasonable diligence would have been known to the Agency. Agency shall be deemed to have knowledge of a breach if such breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee or agent of the Agency. Agency shall take:
i. prompt corrective action to mitigate any risks or damages involved with the breach or security incident and to protect the operating environment; and
ii. any action pertaining to a breach required by applicable federal and state laws.
Data Breach; Loss of City Data. In the event of any Data Breach, act, error, omission, negligence, misconduct, or breach that compromises or is suspected to compromise the security, confidentiality, or integrity of City Data or the physical, technical, administrative, or organizational safeguards put in place by FIRST PARTY that relate to the protection of the security, confidentiality, or integrity of City Data, FIRST PARTY shall, as applicable: i. Notify City immediately following discovery, but no later than twenty- four (24) hours, of becoming aware of such occurrence or suspected occurrence. FIRST PARTY’S report shall identify: 1. the nature of the unauthorized access, use or disclosure; 2. the Confidential Information accessed, used or disclosed; 3. the person(s) who accessed, used and disclosed and/or received protected information (if known); 4. what FIRST PARTY has done or will do to mitigate any deleterious effect of the unauthorized access, use or disclosure; and 5. what corrective action FIRST PARTY has taken or will take to prevent future unauthorized access, use or disclosure.