Common use of Reporting of Unauthorized Disclosures or Misuse of Covered Data and Information Clause in Contracts

Reporting of Unauthorized Disclosures or Misuse of Covered Data and Information. Contractor shall, within one hour of discovery, report to THECB any use or disclosure of CDI not authorized by this Contract or in writing by THECB. Contractor’s report shall identify: (a) the nature of the unauthorized use or disclosure, (b) the CDI used or disclosed, (c) who made the unauthorized use and who received the unauthorized disclosure, (d) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (e) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as requested by THECB. Contractor shall be responsible for any data breach notifications and damages to affected individuals that are required by state or federal law.

Reporting of Unauthorized Disclosures or Misuse of Covered Data and Information. Contractor shall, within one hour of discovery, report to THECB any use or disclosure of CDI not authorized by this Contract or in writing by THECB. Contractor’s report shall identify: (a) the nature of the unauthorized use or disclosure, (b) the CDI used or disclosed, (c) who made the unauthorized use and who received the unauthorized disclosure, (d) what Contractor has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure, and (e) what corrective action Contractor has taken or shall take to prevent future similar unauthorized use or disclosure. Contractor shall provide such other information, including a written report, as requested by THECB. Contractor shall be responsible for any data breach notifications and damages to affected individuals that are required by state or federal law.