Notice of Breach and Unauthorized Release a. In the event of a breach of this Agreement and unauthorized release of student data, the Vendor shall:
1. Immediately notify Hinsdale Central School District in the most expedient way possible and without unreasonable delay, but no more than seven (7) calendar days after Vendor has discovered or been informed of the breach or authorized release.
2. Advise Hinsdale Central School District as to the nature of the breach and steps Vendor has taken to minimize said breach.
b. In the case of required notification to a parent or eligible student, the Vendor shall:
1. Promptly reimburse Hinsdale Central School District for the full costs of such notification.
c. Vendor will cooperate with Hinsdale Central School District and provide as much information as possible directly to Hinsdale Central School District about the incident, including but not limited to:
1. The description of the incident;
2. The date of the incident;
3. The date Vendor discovered or was informed of the incident;
4. A description of the types of Protected Data involved;
5. An estimate of the number of records affected;
6. The school affected;
7. What the Vendor has done or plans to do to investigate the incident, stop the breach and mitigate any further unauthorized access or release of Protected Data; and
8. The contact information for Vendor representatives who can assist affected individuals that may have additional questions.
d. The Vendor shall indemnify and hold Hinsdale Central School District harmless from any claims arising from its breach within the Data Sharing and Confidentiality Agreement confidentiality and data security and privacy standards provision.
e. Vendor acknowledges that upon initial notification from Vendor, Hinsdale Central School District, as the educational agency with which Vendor contracts, has an obligation under Section 2-d to in turn notify the Chief Privacy Officer in the New York State Education Department (“CPO”). Vendor agrees not to provide this notification to the CPO directly unless requested by Hinsdale Central School District or otherwise required by law. In the event the CPO contacts Vendor directly or requests more information from Vendor regarding the incident after having been initially informed of the incident by Hinsdale Central School District, Vendor will promptly inform Hinsdale Central School District of the same.
Notice of Breach and Unauthorized Release a. In the event of a breach of this Agreement and unauthorized release of student data, Clever Prototypes, LLC shall:
1. Immediately notify CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in the most expedient way possible and without unreasonable delay, but no more than seven (7) calendar days after Clever Prototypes, LLC has discovered or been informed of the breach or authorized release.
2. Advise CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as to the nature of the breach and steps Clever Prototypes, LLC has taken to minimize said breach.
b. In the case of required notification to a parent or eligible student, Clever Prototypes, LLC shall:
1. Promptly reimburse CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for the full costs of such notification.
c. Clever Prototypes, LLC will cooperate with CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL and provide as much information as possible directly to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL about the incident, including but not limited to:
1. The description of the incident;
2. The date of the incident;
3. The date Clever Prototypes, LLC discovered or was informed of the incident;
4. A description of the types of Protected Data involved;
5. An estimate of the number of records affected;
6. The schools within CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL affected;
7. What Clever Prototypes, LLC has done or plans to do to investigate the incident, stop the breach and mitigate any further unauthorized access or release of Protected Data; and
8. The contact information for Clever Prototypes, LLC representatives who can assist affected individuals that may have additional questions.
d. The Clever Prototypes, LLC shall indemnify and hold CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL harmless from any claims arising from its breach within the Data Sharing and Confidentiality Agreement confidentiality and data security and privacy standards provision.
e. Clever Prototypes, LLC acknowledges that upon initial notification from Clever Prototypes, LLC, CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, as the educational agency with which Clever Prototypes, LLC contracts, has an obligation under Section 2-d to in turn notify the Chief Privacy Officer in the New York State Education Department (“CPO”). Clever Prototypes, LLC agrees not to provide this notification to the CPO directly unless requested by CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL or otherwise required by law. In the event the CPO contacts Clever Prototypes, LLC directly or requests more information f...
Notice of Breach and Unauthorized Release a. In the event of a breach of this Agreement and unauthorized release of student data, the Vendor shall:
1. Timely notify CRCS in the most expedient way possible and without unreasonable delay, but no more than seven (7) calendar days after Vendor has discovered or been informed of the breach or authorized release.
2. Advise CRCS as to the nature of the breach and steps Vendor has taken to minimize said breach.
b. In the case of required notification to a parent or eligible student, the Vendor shall:
1. Promptly reimburse CRCS for the full actual costs of such notification.
c. Vendor will cooperate with CRCS and provide as much information as possible directly to CRCS about the incident, including but not limited to:
1. The description of the incident;
2. The date of the incident;
3. The date Vendor discovered or was informed of the incident;
4. A description of the types of Protected Data involved;
5. An estimate of the number of records affected;
6. The schools within CRCS affected;
7. What the Vendor has done or plans to do to investigate the incident, stop the breach and mitigate any further unauthorized access or release of Protected Data; and
8. The contact information for Vendor representatives who can assist CRCS with its response to affected individuals that may have additional questions.
d. The Vendor shall indemnify and hold CRCS harmless from any claims arising from its breach within the Data Sharing and Confidentiality Agreement. Such indemnities shall be subject to the following: CRCS shall provide Vendor with (a) prompt written notice of a claim; (b) the right to solely control and direct the investigation, preparation, defense and settlement thereof, and (c) reasonable assistance and information.
e. Vendor acknowledges that upon initial notification from Vendor, CRCS, as the educational agency with which Vendor contracts, has an obligation under Section 2-d to in turn notify the Chief Privacy Officer in the New York State Education Department (“CPO”). Vendor agrees not to provide this notification to the CPO directly unless requested by CRCS or otherwise required by law. In the event the CPO contacts Vendor directly or requests more information from Vendor regarding the incident after having been initially informed of the incident by CRCS, Vendor will promptly inform CRCS of the same.
