Mitigation and Other Activities. Immediately upon becoming aware of an Event, the Transportation Provider shall take all reasonable and appropriate action necessary to:
Mitigation and Other Activities. Upon becoming aware of any Event, Contractor shall take all reasonable and appropriate action necessary to: a) retrieve, to the extent practicable, any PI involved in the Event; b) mitigate, to the extent practicable, any harmful effect of the Event known to Contractor; and c) take such further action as may be required by any applicable state or federal law or regulation concerning the privacy and security of any PI involved in the Event. Upon request, Contractor shall take such further commercially reasonable actions as identified by MassIT, EOHHS or CCA, as the case may be, to, or shall take such additional action to assist those entities to, further mitigate, to the extent practicable, any harmful effect of the Event. Any actions to mitigate harmful effects of such Event undertaken by Contractor on its own initiative or pursuant to a request under this paragraph shall not relieve Contractor of its obligations to report such Event under this paragraph or any other provisions of this Agreement.
Mitigation and Other Activities. Immediately upon becoming aware of an Event, the Contractor shall take all reasonable and appropriate action necessary to: a) retrieve, to the extent practicable, any PI involved in the Event; b) mitigate, to the extent practicable, any harmful effect of the Event known to the Contractor; c) take such other action(s) as may be required in connection with the Event to comply with any Applicable Law. Upon becoming aware of an Event, the Contractor shall also perform a root cause analysis, prepare a corrective action plan, and, in accordance with terms and deadlines of subsection 2 below, shall deliver a resolution report to EOHHS including root cause, and actions taken to resolve the Event and prevent its recurrence. If an Event is the result of a data security vulnerability, such as hacking, ransomware, or other data security related instance, the Contract shall provide a written forensics report to EOHHS that shall, at a minimum, describe the attack, security vulnerabilities, and any other information EOHHS deems necessary to determine compliance with this Agreement. Such report shall not be withheld by the Contractor. Upon request, the Contractor shall take such further actions as EOHHS may reasonably request or shall take such reasonable additional action to assist EOHHS, to further mitigate any harmful effect of the Event. Any actions to mitigate harmful effects of such Event undertaken by the Contractor on its own initiative or pursuant to EOHHS’ request shall not relieve the Contractor of its obligations to report such Event or otherwise comply with this Section 1.3G, any other provisions of this Agreement or the Contract or Applicable Law.
Mitigation and Other Activities. Immediately upon becoming aware of an Event, the Provider shall take all reasonable and appropriate action necessary to: a) retrieve, to the extent practicable, any PI involved in the Event; b) mitigate, to the extent practicable, any harmful effect of the Event known to the Provider; and c) take such other action(s) as may be required in connection with the Event to comply with any Applicable Law. Upon request, the Provider shall take such further actions as EOHHS, may reasonably request to, or shall take such additional action to assist EOHHS further mitigate, to the extent practicable, any harmful effect of the Event. Any actions to mitigate harmful effects of such Event undertaken by the Provider on its own initiative or pursuant to EOHHS’ request shall not relieve the Provider of its obligations to report such Event or otherwise comply with this Section 2.5 of Appendix A or any other applicable provisions of the Contract or this Appendix.
Mitigation and Other Activities. Immediately upon becoming aware of an Event, the Contractor shall take all reasonable and appropriate action necessary to:
