Notification of Breach During the term of this Agreement:
Data Breaches 4.1 The Data Processor does not guarantee that its security measures will be effective under all conditions. If the Data Processor discovers a data breach within the meaning of Article
Data Breach In the event of an unauthorized release, disclosure or acquisition of Student Data that compromises the security, confidentiality or integrity of the Student Data maintained by the Provider the Provider shall provide notification to LEA within seventy-two (72) hours of confirmation of the incident, unless notification within this time limit would disrupt investigation of the incident by law enforcement. In such an event, notification shall be made within a reasonable time after the incident. Provider shall follow the following process:
(1) The security breach notification described above shall include, at a minimum, the following information to the extent known by the Provider and as it becomes available:
i. The name and contact information of the reporting LEA subject to this section.
ii. A list of the types of personal information that were or are reasonably believed to have been the subject of a breach.
iii. If the information is possible to determine at the time the notice is provided, then either
(1) the date of the breach, (2) the estimated date of the breach, or (3) the date range within which the breach occurred. The notification shall also include the date of the notice.
iv. Whether the notification was delayed as a result of a law enforcement investigation, if that information is possible to determine at the time the notice is provided; and
v. A general description of the breach incident, if that information is possible to determine at the time the notice is provided.
(2) Provider agrees to adhere to all federal and state requirements with respect to a data breach related to the Student Data, including, when appropriate or required, the required responsibilities and procedures for notification and mitigation of any such data breach.
(3) Provider further acknowledges and agrees to have a written incident response plan that reflects best practices and is consistent with industry standards and federal and state law for responding to a data breach, breach of security, privacy incident or unauthorized acquisition or use of Student Data or any portion thereof, including personally identifiable information and agrees to provide XXX, upon request, with a summary of said written incident response plan.
(4) LEA shall provide notice and facts surrounding the breach to the affected students, parents or guardians.
(5) In the event of a breach originating from XXX’s use of the Service, Provider shall cooperate with XXX to the extent necessary to expeditiously secure Student Data.
Investigation of Breach If the Seller (i) has knowledge of a breach of a representation or warranty made in Section 3.4, (ii) receives notice from the Depositor, the Trust, the Owner Trustee or the Indenture Trustee of a breach of a representation or warranty made in Section 3.4, (iii) receives a written request to repurchase a Receivable due to an alleged breach of a representation and warranty in Section 3.4 from the Owner Trustee, the Indenture Trustee, any Verified Note Owner or any Noteholder (which repurchase request shall provide sufficient detail so as to allow the Seller to reasonably investigate the alleged breach of the representations and warranties in Section 3.4; provided, that with respect to a repurchase request from a Noteholder or a Verified Note Owner, such repurchase request shall initially be provided to the Indenture Trustee) for a Receivable (each, a “Repurchase Request”) or (iv) receives a final report from the Asset Representations Reviewer that indicates that the Asset Representations Reviewer has determined that a test procedure under the Asset Representations Review Agreement has not been satisfied with respect to a representation or warranty set forth in Section 3.4 for a Receivable, then, in each case, the Seller will investigate the Receivable to confirm the breach and determine if the breach materially and adversely affects the interests of the Purchaser, the Issuer or the Noteholders in any Receivable. None of the Servicer, the Issuer, the Owner Trustee, the Indenture Trustee, the Asset Representations Reviewer or the Administrator will have an obligation to investigate whether a breach of any representation or warranty has occurred or whether any Receivable is required to be repurchased under this Section 3.5.
Event of Breach 7.1 The following circumstances shall be deemed Event of Default:
7.1.1 Pledgor’s any breach to any obligations under the Transaction Documents and/or this Agreement.
7.1.2 Party C’s any breach to any obligations under the Transaction Documents and/or this Agreement.
7.2 Upon notice or discovery of the occurrence of any circumstances or event that may lead to the aforementioned circumstances described in Section 7.1, Pledgor and Party C shall immediately notify Pledgee in writing accordingly.
7.3 Unless an Event of Default set forth in this Section 7.1 has been successfully resolved to Pledgee’s satisfaction within twenty (20) days after the Pledgee and /or Party C delivers a notice to the Pledgor requesting ratification of such Event of Default, Pledgee may issue a Notice of Default to Pledgor in writing at any time thereafter, demanding the Pledgor to immediately exercise the Pledge in accordance with the provisions of Section 8 of this Agreement.
Waiver of Breach The waiver by either party of a breach of any provision of this Agreement shall not operate or be construed as a waiver of any subsequent breach thereof.
Notice of Breaches The Company and the Purchaser shall give prompt written notice to the other of any breach by it of any representation, warranty or other agreement contained in any Transaction Document, as well as any events or occurrences arising after the date hereof, which would reasonably be likely to cause any representation or warranty or other agreement of such party, as the case may be, contained in the Transaction Document to be incorrect or breached as of such Closing Date. However, no disclosure by either party pursuant to this Section shall be deemed to cure any breach of any representation, warranty or other agreement contained in any Transaction Document. Notwithstanding the generality of the foregoing, the Company shall promptly notify the Purchaser of any notice or claim (written or oral) that it receives from any lender of the Company to the effect that the consummation of the transactions contemplated by the Transaction Documents violates or would violate any written agreement or understanding between such lender and the Company, and the Company shall promptly furnish by facsimile to the holders of the Debentures a copy of any written statement in support of or relating to such claim or notice.
Non-Waiver of Breach The waiver by any party hereto of the other party’s prompt and complete performance, or breach or violation, of any term or provision of this Agreement shall be effected solely in a writing signed by such party, and shall not operate nor be construed as a waiver of any subsequent breach or violation, and the waiver by any party hereto to exercise any right or remedy which he or it may possess shall not operate nor be construed as the waiver of such right or remedy by such party, or as a bar to the exercise of such right or remedy by such party, upon the occurrence of any subsequent breach or violation.
Actions in Event of Breach Upon Contractor’s material breach, the Department may: terminate this contract under Section 17.1 and pursue any of its remedies under this contract, at law, or in equity; or treat this contract as materially breached and pursue any of its remedies under this contract, at law, or in equity. Upon the Department’s material breach, Contractor may: terminate this contract under Section 17.2 and pursue any of its remedies under this contract, at law, or in equity; or treat this contract as materially breached and, except as the remedy is limited in this contract, pursue any of its remedies under this contract, at law, or in equity.
Providing Notice of Breaches 8.1 If Covered Entity determines that an impermissible acquisition, access, use or disclosure of PHI for which one of Business Associate’s employees or agents was responsible constitutes a Breach as defined in 45 CFR § 164.402, and if requested by Covered Entity, Business Associate shall provide notice to the individual(s) whose PHI has been the subject of the Breach. When requested to provide notice, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. The cost of notice and related remedies shall be borne by Business Associate.
8.2 If Covered Entity or Business Associate determines that an impermissible acquisition, access, use or disclosure of PHI by a Subcontractor of Business Associate constitutes a Breach as defined in 45 CFR § 164.402, and if requested by Covered Entity or Business Associate, Subcontractor shall provide notice to the individual(s) whose PHI has been the subject of the Breach. When Covered Entity requests that Business Associate or its Subcontractor provide notice, Business Associate shall either 1) consult with Covered Entity about the specifics of the notice as set forth in section 8.1, above, or 2) require, by contract, its Subcontractor to consult with Covered Entity about the specifics of the notice as set forth in section 8.1
8.3 The notice to affected individuals shall be provided as soon as reasonably possible and in no case later than 60 calendar days after Business Associate reported the Breach to Covered Entity.
8.4 The notice to affected individuals shall be written in plain language and shall include, to the extent possible, 1) a brief description of what happened, 2) a description of the types of Unsecured PHI that were involved in the Breach, 3) any steps individuals can take to protect themselves from potential harm resulting from the Breach, 4) a brief description of what the Business Associate is doing to investigate the Breach, to mitigate harm to individuals and to protect against further Breaches, and 5) contact procedures for individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c).
8.5 Business Associate shall notify individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.
