Common use of Data Security Breach Clause in Contracts

Data Security Breach. Each party agrees that, should there be any unauthorized access to Personal Information it will notify the other parties of such unauthorized access. Notification is to occur promptly after determination that a security incident may have occurred and will contain reasonable details relating to the incident. Each party will cooperate on an as-needed basis with General Agency Agreement M1252 (2/2021) another party to this Agreement who undertakes an investigation of the incident. Each party with a security incident will keep the other parties to this Agreement informed of actions taken in connection with its response to each security incident involving Personal Information. Each party to this Agreement will act in good faith, and work with and assist the party with a security incident with any required customer notification or remediation; such activities will be consistent with applicable laws, rules, and regulations including, but not limited to, the Privacy Laws and the Cybersecurity Laws. The party with a security incident shall indemnify and hold the other parties to this Agreement harmless from any cost or expense of remediation, unless the negligence or willful misconduct of a party who did not experience a security incident contributed to the breach.