Common use of Mandatory Reporting Clause in Contracts

Mandatory Reporting. 7.1. The Processor will inform the Responsible as soon as possible - and at the latest within 24 hours after the first discovery - of all (suspected) security breaches and other incidents that must be reported to the supervisor or data subject pursuant to legislation, without prejudice to the obligation to undo or limit the consequences of such violations and incidents as quickly as possible. The Processor will furthermore, at the first request of the Responsible, provide all information that the Responsible considers necessary to assess the incident. In doing so, the Processor will in any case provide the information to the Responsible as described in appendix 2.2.