Loss or Compromise of Data. In the event of any act, error or omission, negligence, misconduct, or breach on the part of Contractor that compromises or is suspected to compromise the security, confidentiality, or integrity of State Data or the physical, technical, administrative, or organizational safeguards put in place by Contractor that relate to the protection of the security, confidentiality, or integrity of State Data, Contractor must, as applicable: (a) notify the State as soon as practicable but no later than twenty-four (24) hours of becoming aware of such occurrence; (b) cooperate with the State in investigating the occurrence, including making available all relevant records, logs, files, data reporting, and other materials required to comply with applicable law or as otherwise required by the State; (c) in the case of PII or PHI, at the State’s sole election, (i) with approval and assistance from the State, notify the affected individuals who comprise the PII or PHI as soon as practicable but no later than is required to comply with applicable law, or, in the absence of any legally required notification period, within five (5) calendar days of the occurrence; or (ii) reimburse the State for any costs in notifying the affected individuals; (d) in the case of PII, provide third-party credit and identity monitoring services to each of the affected individuals who comprise the PII for the period required to comply with applicable law, or, in the absence of any legally required monitoring services, for no less than twenty-four (24) months following the date of notification to such individuals; (e) perform or take any other actions required to comply with applicable law as a result of the occurrence; (f) pay for any costs associated with the occurrence, including but not limited to any costs incurred by the State in investigating and resolving the occurrence, including reasonable attorney’s fees associated with such investigation and resolution; (g) without limiting Contractor’s obligations of indemnification as further described in this Contract, indemnify, defend, and hold harmless the State for any and all claims, including reasonable attorneys’ fees, costs, and incidental expenses, which may be suffered by, accrued against, charged to, or recoverable from the State in connection with the occurrence; (h) be responsible for recreating lost State Data in the manner and on the schedule set by the State without charge to the State; and (i) provide to the State a detailed plan wit...
Loss or Compromise of Data. In the event of any act, error or omission, negligence, misconduct, or breach on the part of Supplier that compromises or is suspected to compromise the security or confidentiality of University Data or the physical, technical, administrative, or organizational safeguards put in place by Supplier that relate to the protection of the security and confidentiality of University Data, Supplier must, as applicable: (a) notify the University as soon as practicable but no later than forty-eight (48) hours of becoming aware of such occurrence; (b) cooperate with the University in investigating the occurrence, including making available all relevant records, logs, files, data reporting, and other materials required to comply with applicable law or as otherwise required by the University; (c) in the case of personally identifiable information (“PII”), at the University’s sole election, (i) with approval and assistance from the University, notify the affected individuals who comprise the PII as soon as practicable but no later than is required to comply with applicable law; or (ii) reimburse the University for any costs in notifying the affected individuals; (d) in the case of PII, and if required by law, provide third- party credit and identity monitoring services to each of the affected individuals who comprise the PII for the period required to comply with applicable law; (e) perform or take any other actions required to comply with applicable law as a result of the occurrence; (f) pay for any costs associated with the occurrence, including but not limited to any costs incurred by the University in investigating and resolving the occurrence, including reasonable attorney’s fees associated with such investigation and resolution;
Loss or Compromise of Data. (1) Contractor shall immediately notify County in writing of any use or disclosure of County data not authorized by this Agreement, including any reasonable belief that an unauthorized individual has accessed County data. Contractor’s notice shall identify the nature of the breach and what the Contractor has done or will do to mitigate the effect of the unauthorized use or disclosure. Furthermore, Contractor agrees to investigate the breach and cooperate with County’s investigation, if any. Contractor shall perform a root cause analysis of the breach and submit such analysis to County. Contractor shall be responsible for all costs incurred as a result of the unauthorized use or disclosure of County data due to any act, error or omission, negligence, misconduct or breach on the part of Contractor.
