Data Breach; Loss of City Data. The Agency shall notify City immediately by telephone call plus email upon the discovery of a breach (as herein). For purposes of this Section, breaches and security incidents shall be treated as discovered by Agency as of the first day on which such breach or security incident is known to the Agency, or, by exercising reasonable diligence would have been known to the Agency. Agency shall be deemed to have knowledge of a breach if such breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee or agent of the Agency. Agency shall take: i. prompt corrective action to mitigate any risks or damages involved with the breach or security incident and to protect the operating environment; and ii. any action pertaining to a breach required by applicable federal and state laws.
Appears in 5 contracts
Samples: Grant Agreement, Contract Agreement, Agreement Between the City and County of San Francisco and Health Management Associates, Inc.
