Notification of personal data breach. The Contractor notifies the Company of all the Personal Data Breaches without undue delay after the Contractor becomes aware of or its Sub-Processor becomes aware of the Personal Data Breach, but not later than within 24 (twenty-four) hours from the moment when the Contractor or the Sub-Processor becomes aware of the Personal Data Breach. If requested by the Company, the Contractor must without undue delay provide the Company with all appropriate information of the Personal Data Breach. To the extent that this information is held by the Contractor, the notification must describe at least: the Personal Data Breach that has taken place; as far as possible, the categories and approximate number of data subjects concerned and the categories and approximate number of the Personal Data records concerned; description of the likely consequences of the Personal Data Breach; description of the remedial actions that the Contractor has taken or must take to prevent future Personal Data Breach and, if necessary, also measures to mitigate its possible adverse effects; the name and contact details of the data protection officer or other contact point where more information can be obtained; and any other necessary and available information that the Company needs in order to be able to take appropriate safeguards and meet its obligations of notification of a Personal Data Breach to the supervisory authority and, if applicable, to the affected data subjects. The Contractor must without delay document the results of the investigation and the actions taken for the Company, comprising the facts relating to the Personal Data Breach, its effects and the remedial action taken. The Company is responsible for necessary notifications to the supervisory authorities.
Appears in 2 contracts
Samples: Framework Agreement, Framework Agreement
Notification of personal data breach. The Contractor notifies the Company of all the Personal Data Breaches without undue delay after the Contractor becomes aware of or its Sub-Processor becomes aware of the Personal Data Breach, but not later than within 24 (twenty-four) hours from the moment when the Contractor or the Sub-Processor becomes aware of the Personal Data Breach. If requested by the Company, the Contractor must without undue delay provide the Company with all appropriate information of the Personal Data Breach. To the extent that this information is held by the Contractor, the notification must describe at least: :
(a) the Personal Data Breach that has taken place; ;
(b) as far as possible, the categories and approximate number of data subjects concerned and the categories and approximate number of the Personal Data records concerned; ;
(c) description of the likely consequences of the Personal Data Breach; ;
(d) description of the remedial actions that the Contractor has taken or must take to prevent future Personal Data Breach and, if necessary, also measures to mitigate its possible adverse effects; ;
(e) the name and contact details of the data protection officer or other contact point where more information can be obtained; and and
(f) any other necessary and available information that the Company needs in order to be able to take appropriate safeguards and meet its obligations of notification of a Personal Data Breach to the supervisory authority and, if applicable, to the affected data subjects. The Contractor must without delay document the results of the investigation and the actions taken for the Company, comprising the facts relating to the Personal Data Breach, its effects and the remedial action taken. The Company is responsible for necessary notifications to the supervisory authorities.
Appears in 1 contract
Notification of personal data breach. The Contractor notifies the Company of all the Personal Data Breaches without undue delay after the Contractor becomes aware theContractorbecomesaware of or its Sub-Processor becomes Processorbecomes aware of the Personal Data Breach, but not later than within 24 within24 (twenty-four) hours from the moment when the Contractor or the Sub-Processor becomes aware of the Personal Data Breach. If requested by the Company, the Contractor must without undue delay provide the Company with all appropriate information of the Personal Data Breach. To the extent that this information is held by the Contractor, the notification must describe at least: :
(a) the Personal Data Breach that has taken place; ;
(b) as far as possible, the categories and approximate number of data subjects concerned and the categories and approximate number of the ofthe Personal Data records concerned; ;
(c) description of the likely consequences of the Personal Data Breach; ;
(d) description of the remedial actions that the Contractor has taken or must take to prevent future Personal Data Breach and, if necessary, also measures to mitigate its possible adverse effects; ;
(e) the name and contact details of the data protection officer or other contact point where more information can be obtained; and obtained;and
(f) any other necessary and available information that the Company theCompany needs in order to be able to take appropriate safeguards and meet its obligations of notification of a Personal Data Breach to the teh supervisory authority and, if applicable, to the affected data subjects. The Contractor must Contractormust without delay document the results of the investigation and the actions taken for the Company, comprising the facts relating to the Personal Data Breach, its effects and the remedial action taken. The Company is Companyis responsible for necessary notifications to the supervisory authorities.
Appears in 1 contract
Samples: Framework Agreement
Notification of personal data breach. The Contractor notifies the Company of all the Personal Data Breaches without undue delay after the Contractor becomes aware of or its Sub-Processor becomes aware of the Personal Data Breach, but not later than within 24 within24 (twenty-four) hours from the moment when the Contractor or the Sub-Processor becomes aware of the Personal Data Breach. If requested by the Company, the Contractor must without undue delay provide the Company with all appropriate information of the Personal Data Breach. To the extent that this information is held by the Contractor, the notification must describe at least: :
(a) the Personal Data Breach that has taken place; ;
(b) as far as possible, the categories and approximate number of data subjects concerned and the categories and approximate number of the ofthe Personal Data records concerned; ;
(c) description of the likely consequences of the Personal Data Breach; ;
(d) description of the remedial actions that the Contractor has taken or must take to prevent future Personal Data Breach and, if necessary, also measures to mitigate its possible adverse effects; ecfftes;
(e) the name and contact details of the data protection officer or other contact point where more information can be obtained; and obtained;and
(f) any other necessary and available information that the Company theCompany needs in order to be able to take appropriate safeguards and meet its obligations of notification of a Personal Data Breach to the supervisory authority and, if applicable, to the affected data subjects. The Contractor must without delay document the results of the investigation and the actions taken for the Company, comprising the facts relating to the Personal Data Breach, its effects and the remedial action taken. The Company is Companyis responsible for necessary notifications to the supervisory authorities.
Appears in 1 contract
Samples: Framework Agreement