Common use of Data Breaches Clause in Contracts

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor will comply with the breach notice requirements of Public Act 16­189 (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins ▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;

Data Breaches. DISTRICT USE ONLY A. Upon the discovery confirmation by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor will comply with shall provide initial notice to the breach notice requirements Board as soon as possible, but not more than thirty (30) days after confirmation of Public Act 16­189 such discovery (“Initial initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins ▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ Data Coordinator and Superintendent, and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery confirmation by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delaydelay and at no cost to the Board, but not later than thirty (30) calendar days after discovery disclosure of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date data and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. If such breach did not impact the unauthorized release of student information, student records, or student-generated content, Contractor will notify the Board within 30 days after disclosure of such a breach. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding respect to investigation of the breach, including but not limited to the costs relating to notifications as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this the Article, the Contractor shall provide the Board board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date day that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student dataStudent Data, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins Superintendent ▇▇▇▇▇▇▇ ▇. ▇▇▇▇, ▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data Student Data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data Student Data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189▇▇▇▇. Gen. Stat. § 10-234dd. D. Notwithstanding To the extent the Board determines that the breach notifications required in this Articletriggers third party notice requirements under applicable laws, as the owner of the Student Data, the Contractor Board shall provide be responsible for the Board with a copy timing and content of the notification that it provides notices to a student or be sent. Notices will include the parents or guardians of following information, and Contractor agrees to provide such student pursuant to Public Act 16­189. The copy of such notice shall be provided information, to the Board by electronic mail on the same date that it is provided extent known, to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a studentBoard: 1. Name of the student being notified whose student data Student Data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach. E. Except as otherwise required by law, Contractor will not provide notice of the Security Incident directly to individuals whose personal information was affected, to regulatory agencies, or to other entities, without first providing written notice to the Board. Contractor will be responsible for, and will bear, all notification related costs arising out of or in connection with the Security Incident, subject to any limitations of liability terms contained in the Agreement. For clarity and without limitation, Contractor will not be responsible for costs associated with voluntary notification that is not legally required. With respect to any Security Incident which is not due to acts or omissions of Contractor or its agents, Contractor will reasonably cooperate in performing the activities described above, as the Board’s requests, at the Board’s reasonable expense.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than three (3) business days after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail Certified U.S. Mail addressed to the SysAdmins Superintendent of Schools, Madison Public Schools ▇▇ ▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇▇, ▇▇ ▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for reasonable costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189▇▇▇▇. Gen. Stat. 10-234dd. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. 10- 234dd(b). The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. N. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student datadata (“Data Breach”), the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins ▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ [ ] and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breachData Breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breachData Breach; 4. The Contractor’s proposed plan to investigate and remediate the breachData Breach. B. O. Upon discovery by the Contractor of a breachData Breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breachData Breach, shall provide the Board with a more detailed notice of the breachData Breach, including but not limited to the date and time of the breachData Breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breachData Breach; and measures taken to ensure that such a breach Data Breach does not occur in the future. C. P. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and Data Breach and, subject to the limitation of liability set forth in the Terms of Use, to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189Conn. Gen. Stat. § 10-234dd, to the extent the Data Breach was the result of Contractor’s failure to meet its obligations under this Agreement. D. Q. Notwithstanding the breach Data Breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189Conn. Gen. Stat. § 10-234dd. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach Data Breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the Data Breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty­eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins ▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (“48) hours after such discovery ("Initial Notice”"). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins Superintendent ▇▇▇▇▇ ▇. ▇▇▇▇▇▇▇ ▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ and shall include the following information, to the extent known at the time of notification: 1. Date and time of the breach; 2. Names of student(s) whose student data was released, disclosed or acquired; 3. The nature and extent of the breach; 4. The Contractor’s 's proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(srtame(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s 's notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students; 2. Date and time of the breach.

Data Breaches. A. Upon the discovery by the Contractor of a breach of security that results in the unauthorized release, disclosure, or acquisition of student data, or the suspicion that such a breach may have occurred, the Contractor will comply with shall provide initial notice to the breach notice requirements of Public Act 16­189 Board as soon as possible, but not more than forty-eight (48) hours after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to the SysAdmins ▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ and shall include the following information, to the extent known at the time of notification: 1. : Date and time of the breach; 2. ; Names of student(s) whose student data was released, disclosed or acquired; 3. ; The nature and extent of the breach; 4. ; The Contractor’s proposed plan to investigate and remediate the breach. B. Upon discovery by the Contractor of a breach, the Contractor shall conduct an investigation and restore the integrity of its data systems and, without unreasonable delay, but not later than thirty (30) days after discovery of the breach, shall provide the Board with a more detailed notice of the breach, including but not limited to the date and time of the breach; name(s) of the student(s) whose student data was released, disclosed or acquired; nature and extent of the breach; and measures taken to ensure that such a breach does not occur in the future. C. The Contractor agrees to cooperate with the Board with respect to investigation of the breach and to reimburse the Board for costs associated with responding to the breach, including but not limited to the costs relating to notifications as required by Public Act 16­18916-189. D. Notwithstanding the breach notifications required in this Article, the Contractor shall provide the Board with a copy of the notification that it provides to a student or the parents or guardians of such student pursuant to Public Act 16­18916-189. The copy of such notice shall be provided to the Board by electronic mail on the same date that it is provided to the student or parents or guardians of such student. The Parties agree that the following information shall be included in the Contractor’s notice of breach to a student or parent or guardian of a student: 1. Name of the student being notified whose student data was released, disclosed or acquired, which shall not include the names of other students;