Incident Notice. If Provider becomes aware of an Incident involving any Confidential Information, it shall notify the State immediately and cooperate with the State regarding recovery, remediation, and the necessity to involve law enforcement, if any. Unless Provider establishes that neither Provider nor any of its agents, employees, Subcontractors, or permitted assigns was the cause or source of the Incident, Provider shall be responsible for the cost of notifying each person whose Confidential Information may have been compromised by the Incident. In any case where an issue with Provider’s system is found to cause a problem where data integrity, accuracy or ability to report data via the API is identified Provider shall notify all potentially affected licensees and the State as quickly as feasible to prevent state Licensees from reporting inaccurate or false information.
Incident Notice. Initial Notice. Within 24 hours of Discovery of an Incident that the MCO or the MCO’s Risk analysis has determined has more than a low probability of compromise, the MCO must preliminarily report on the occurrence of an Incident to the HHSC Privacy Officer via email at: xxxxxxx@XXXX.xxxxx.xx.xx using the Potential Privacy/Security Incident Form which is available on the HHSC website. This initial notice must, at a minimum, contain (1) all information reasonably available to the MCO about the Incident, (2) confirmation that the MCO has met any applicable federal Breach notification requirements and (3) a single point of contact for the MCOs for HHSC communications both during and outside of business hours during the Incident Response Period.
Incident Notice. If Contractor becomes aware of an Incident involving any State Information, it shall notify the State immediately and cooperate with the State regarding recovery, remediation, and the necessity to involve law enforcement, if any. Unless Contractor can establish that Contractor or any of its Subcontractors is not the cause or source of the Incident, Contractor shall be responsible for the cost of notifying each person whose personal information may have been compromised by the Incident.
Incident Notice a. Initial Notice.
Incident Notice. NEOGOV maintains incident management policies and procedures, and shall notify Customer, without undue delay, of any breach of its security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data in connection with NEOGOV’s provision of Services under the Services Agreement and of which NEOGOV becomes aware and which requires notification to be made to Customer, a Supervisory Authority and/or Data Subject under Data Protection Laws and Regulations (a “Breach Incident”). “Breach Incident(s)” will not include unsuccessful attempts or activities that do not compromise the security of Personal Data, including unsuccessful log-in attempts, and other network attacks on firewalls or networked systems. NEOGOV shall make reasonable efforts to identify the cause of such Breach Incident and take those steps as NEOGOV deems necessary and reasonable in order to remediate the cause of such a Breach Incident to the extent the remediation is within NEOGOV’s reasonable control. Additionally, upon request, NEOGOV shall provide Customer with relevant information about the Breach Incident, as reasonably required to assist the Customer in ensuring Customer’s compliance with its own obligations under Data Protection Laws and Regulations to notify any Supervisory Authority or Data Subject in the event of a Breach Incident. The obligations herein shall not apply to incidents that are caused by Customer or Customer’s users or any non-NEOGOV products or services.
Incident Notice. If Provider becomes aware of an Incident involving any Confidential Information, it shall notify the State immediately and cooperate with the State regarding recovery, remediation, and the necessity to involve law enforcement, if any. Unless Provider establishes that it was not the cause or source of the Incident, Provider shall be responsible for the cost of notifying each person whose Confidential Information may have been compromised by the Incident. In any case where an issue with the Provider’s System is found to cause a problem where data integrity, accuracy, or ability to report data via the API is identified, the Provider shall notify all potentially affected Licensees and the Department and the Board as quickly as feasible to prevent State Licensees from reporting inaccurate or false information.
Incident Notice. If Third party point of sale software vendor becomes aware of an Incident involving any Confidential Information, it shall notify the State immediately and cooperate with the State regarding recovery, remediation, and the necessity to involve law enforcement, if any. Unless Third party point of sale software vendor establishes that neither Third party point of sale software vendor nor any of its agents, employees, Subcontractors, or permitted assigns was the cause or source of the Incident, Third party point of sale software vendor shall be responsible for the cost of notifying each person whose Confidential Information may have been compromised by the Incident. The State will own all right, title and interest in its data that is related to the services provided by this Agreement.
