Common use of Data Breaches Clause in Contracts

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor will comply with the breach notice requirements of Public Act 16­189 (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications breach as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student dataStudent Data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data Student Data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data Student Data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Conn. Gen. Stat. § 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. § 10-234dd. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data Student Data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the an unauthorized release, disclosure, disclosure or acquisition of student data, including any directory information contained in such student information, the Contractor will comply with Contractor/Vendor shall notify, without unreasonable delay, but not more than five days (5) after such discovery, the Board of Education of such breach notice requirements of Public Act 16­189 security (the “Initial Notice”). The Initial Notice shall be delivered to the Board of Education by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Xxxxxxx Xxxxx at Xxxxxx@xxxxx.xxx and Xxxxxxx Xxxxxxx Xxxxx at xxxxxxxxxxxxx@xxxxx.xxx, and shall include the following information, to the extent known at the time of the notification: 1. (i) Date and time of the breach; 2. (ii) Names of student(s) whose student data was released, disclosed disclosed, or acquired;acquired;‌ 3. (iii) The nature and extent of the breach; 4. (iv) The Contractor’s proposed plan to investigate and remediate the breach B. Upon receipt of notice of a breach of security, the Board of Education shall electronically notify, not later than forty-eight (48) hours after receipt of such notice, the student and the parents or guardians of the student whose student information, student records or student-generated content is involved in such breach of security. The Board of Education shall post such notice on the board’s Internet web site. B. C. Upon discovery by the Contractor Contractor/Vendor of a breach, the Contractor Contractor/Vendor shall within thirty (30) days of the discovery of the breach, conduct an investigation and restore the integrity of its data systems andsystems, and also without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board of Education with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. D. The Contractor Contractor/Vendor agrees to cooperate with the Board of Education with respect to the investigation of the breach and to reimburse the Board of Education for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189state law. D. E. If the Contractor is also an Operator, as defined in C.G.S. § 10-234aa: i. Notwithstanding the breach notifications required in this Article, the Contractor Operator shall provide the Board of Education with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189C.G.S. § 10-234dd. The copy of such notice shall be provided to the Board of Education by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of the breach to a student or parent or guardian of a student: 1. a. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;; and the b. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than five (5) business days after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications breach as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a studentastudent: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx xxxxxxxxxx@xxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. : Date and time of the breach; 2. ; Names of student(s) whose student data was released, disclosed or acquired; 3. ; The nature and extent of the breach; 4. ; The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student dataStudent Data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Xxxxxxx Xxxxxx, IT Director, xxxxxxx@xxxxxxx-xx.org, and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach;breach;‌ 2. Names of student(s) whose student data Student Data was released, disclosed disclosed, or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data Student Data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Xxxx. Gen. Stat. § 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. § 10-234dd. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data Student Data was released, disclosed disclosed, or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (“48) hours after such discovery ("Initial Notice”"). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxx X. Xxxxxxx xxxxxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s 's proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(srtame(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s 's notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx xxxxxxxxxxx@xxxxxxxx.x00.xx.xx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Xxxx. Gen. Stat. § 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. § 10- 234dd. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student dataStudent Data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data Student Data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data Student Data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Xxxx. Gen. Stat. § 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. § 10-234dd. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data Student Data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxx Xxxxx, xxxxxx@xxxxxxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 10. Date Xxxx and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. . Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. . The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;

Data Breaches. A. Upon the discovery by the Contractor Transportation Provider of a breach of security that results in the unauthorized release, disclosure, or acquisition of student datadata from the Transportation Provider, or the suspicion that such a breach may have occurred, the Contractor will comply with Transportation Provider shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent of Schools and shall include the following information, to the extent known at the time of notification: 1. : Date and time of the breach; 2. ; Names of student(s) whose student data was released, disclosed or acquired; 3. ; The nature and extent of the breach; 4. ; and‌ The ContractorTransportation Provider’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor Transportation Provider of a breach, the Contractor Transportation Provider shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor Transportation Provider agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Xxxx. Gen. Stat. § 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student dataStudent Data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than two (2) business days after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data Student Data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data Student Data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Xxxx. Gen. Stat. § 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. § 10-234dd. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data Student Data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired;acquired;‌ 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications breach as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty­eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins xxxxxxxxxxxx@xxxxxxxxxxxxx.xxx and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;