Data Security Breach. a. In the event of a confirmed Security Incident, McGraw Hill shall (i) investigate the Security Incident, identify the impact of the Security Incident and take commercially reasonable actions to mitigate the effects of any such Security Incident, (ii) timely provide any notifications to Subscriber or individuals affected by the Security Incident that McGraw Hill is required by law, subject to applicable confidentiality obligations and to the extent allowed and/or required by and not prohibited by Applicable Laws or law enforcement. b. Except to the extent prohibited by Applicable Laws or law enforcement, McGraw Hill shall, upon Subscriber’s written request and to the extent available, provide Subscriber with a description of the Security Incident and the type of data that was the subject of the Security Incident.
Appears in 4 contracts
Samples: Data Sharing and Confidentiality Agreement, Student Data Privacy Agreement, Data Sharing and Confidentiality Agreement