Notification of Claims (a) Except as otherwise provided in this Agreement, a Person that may be entitled to be indemnified under this Agreement (the “Indemnified Party”), shall promptly notify the party liable for such indemnification (the “Indemnifying Party”) in writing of any pending or threatened claim, demand or circumstance that the Indemnified Party has determined has given or would reasonably be expected to give rise to a right of indemnification under this Agreement (including a pending or threatened claim or demand asserted by a third party against the Indemnified Party, such claim being a “Third Party Claim”), describing in reasonable detail the facts and circumstances with respect to the subject matter of such claim, demand or circumstance (a “Claim Notice”); provided, however, that the failure to provide such notice shall not release the Indemnifying Party from any of its obligations under this Article XI except to the extent the Indemnifying Party is prejudiced by such failure, it being understood that notices for claims in respect of a breach or inaccuracy of a representation or warranty or breach of or default under any obligation or covenant must be delivered before the expiration of any applicable survival period specified in Section 11.4(a).
(b) Upon receipt of a notice of a claim for indemnity from an Indemnified Party pursuant to Section 11.5(a) with respect to any Third Party Claim, the Indemnifying Party shall have the right (but not the obligation) to assume the defense and control of any Third Party Claim upon written notice to the Indemnified Party delivered within fifteen (15) Business Days of the Indemnifying Party’s receipt of the applicable Claim Notice and, in the event that the Indemnifying Party shall assume the defense of such claim, it shall allow the Indemnified Party a reasonable opportunity to participate in the defense of such Third Party Claim with its own counsel and at its own expense. The Person that shall control the defense of any such Third Party Claim (the “Controlling Party”) shall select counsel, contractors and consultants of recognized standing and competence after consultation with the other party and shall take all steps reasonably necessary in the defense or settlement of such Third Party Claim.
(c) The Sellers or the Buyer, as the case may be, shall, and shall cause each of its Affiliates and representatives to, reasonably cooperate with the Controlling Party in the defense of any Third Party Claim. The Indemnifying Party shall be authorized to consent to a settlement of, or the entry of any judgment arising from, any Third Party Claim, without the consent of any Indemnified Party; provided that (i) such settlement shall not encumber any of the assets of the Indemnified Party or contain any restriction or condition that would apply to such Indemnified Party or to the conduct of the Indemnified Party’s business, (ii) the Indemnifying Party shall pay all amounts arising out of such settlement or judgment concurrently with the effectiveness of such settlement (subject to Section 11.3, if applicable), and (iii) the Indemnifying Party shall obtain, as a condition of any settlement or other resolution, a complete release of any Indemnified Party potentially affected by such Third Party Claim.
Notification of Xxxxxx and Unauthorized Release (a) Vendor will promptly notify the District of any breach or unauthorized release of Protected Data it has received from the District in the most expedient way possible and without unreasonable delay, but no more than seven (7) calendar days after Vendor has discovered or been informed of the breach or unauthorized release.
(b) Vendor will provide such notification to the District by contacting Xxxxxx Xxx, Data Protection Officer, directly by email at xxxxxx.xxx@xxxxx.xxx or by calling 000-000-0000.
(c) Vendor will cooperate with the District and provide as much information as possible directly to Xxxxxx Xxx, Data Protection Officer or his/her designee about the incident, including but not limited to: a description of the incident, the date of the incident, the date Vendor discovered or was informed of the incident, a description of the types of Protected Data involved, an estimate of the number of records affected, the schools within the District affected, what the Vendor has done or plans to do to investigate the incident, stop the breach and mitigate any further unauthorized access or release of Protected Data, and contact information for Vendor representatives who can assist affected individuals that may have additional questions.
(d) Vendor acknowledges that upon initial notification from Vendor, the District, as the educational agency with which Vendor contracts, has an obligation under Section 2-d to in turn notify the Chief Privacy Officer in the New York State Education Department (“CPO”). Vendor agrees not to provide this notification to the CPO directly unless requested by the District or otherwise required by law. In the event the CPO contacts Vendor directly or requests more information from Vendor regarding the incident after having been initially informed of the incident by the District, Vendor will promptly inform Xxxxxx Xxx, Data Protection Officer or his/her designee.
