Loss of Personal Information or City Work Product. In the event of any act, error or omission, negligence, misconduct, or breach that compromises or is suspected to compromise the security, confidentiality, or integrity of Personal Information or City Work Product, Contractor will, as applicable: (i) notify the affected individual and the City as soon as practicable but no later than twenty-four (24) hours of becoming aware of such occurrence; (ii) cooperate with the affected individual and City in investigating the occurrence, including making available all relevant records, logs, files, data reporting, and other materials required to comply with applicable law or as otherwise required by the affected individual or the City; (iii) in the case of Personal Information and if required by applicable law, at the affected individual’s sole election: (A) notify the affected individuals in accordance with any legally required notification period; or, (B) reimburse the affected individual for any costs in notifying the affected individuals; (iv) in the case of Personal Information and if required by applicable law, provide third-party credit and identity monitoring services to each of the affected individuals for the period required to comply with applicable law; (v) perform or take any other actions required to comply with applicable law as a result of the occurrence; (vi) indemnify, defend, and hold harmless the City and the affected individual for any and all claims, including reasonable attorneys’ fees, costs, and expenses incidental thereto, which may be suffered by, accrued against, charged to, or recoverable from the City or the affected individual in connection with the occurrence; (vii) be responsible for recovering lost data and information in the manner and on the schedule set forth by the City without charge to the affected individual, and (viii) provide to the City and the affected individual a detailed plan within ten (10) calendar days of the occurrence describing the measures Contractor will undertake to prevent a future occurrence. Notification to affected individuals, as described above, will comply with applicable law, be written in plain terms in English and in any other language or languages specified by the affected individual, and contain, at a minimum: (i) name and contact information of Contractor’s representative; (ii) a description of the nature of the loss; (iii) a list of the types of data involved; (iv) the known or approximate date of the loss; (v) how such loss may affect the affect...
