Xxxxxxxx Incident Notification. The Receiving Party must report any Security Incidents involving Data to the WSIB Innovation & Technology Director at xxxxxxxxxxxx@xxx.xx.xxx within one (1) Business Day of discovery. If the Receiving Party does not have full details about the Security Incident, it will report all available information within one (1) Business Day and provide ongoing updates with all available details no less frequently than every five (5) Business Days thereafter. To the extent possible, these reports must include at least: The nature of the unauthorized use or disclosure, including a brief description of what happened, the date of the event(s), and the date of discovery; A description of the types of information involved; The investigative and remedial actions the Receiving Party or its Subcontractor took or will take to prevent and mitigate harmful effects and protect against recurrence; Any details necessary for a determination of whether the incident is a breach that requires notification under RCW 19.255.010, RCW 42.56.590, or any other applicable breach notification law or rule; and Any other information the WSIB reasonably requests. The Receiving Party must also take actions to mitigate the risk of loss and comply with any notification or other requirements imposed by applicable law or reasonably requested by the WSIB in order to meet its regulatory obligations. The Receiving Party is responsible for all costs incurred in connection with a Security Incident, privacy breach, or potential compromise of Data, including: Computer forensics assistance to assess the impact of a Security Incident, determine root cause, and help determine whether and the extent to which notification must be provided to comply with breach notification laws; Notification and call center services for individuals affected by a Security Incident or privacy breach, including fraud prevention, credit monitoring, and identify theft assistance; and Regulatory defense, fines, and penalties from any claim in the form of a regulatory proceeding resulting from a violation of any applicable privacy or security law(s) or regulation(s).
Xxxxxxxx Incident Notification. If Valimail becomes aware of any Security Incident, then Valimail shall, without undue delay, notify Customer of such access, but in any event no more than 72 hours, and provide to Customer timely information and cooperation, as Customer may be required to address Customer’s reporting obligations under the Applicable Privacy Law. Any such notification shall not be construed as an acknowledgement by Valimail of any fault or liability with respect to the unauthorized access.
Xxxxxxxx Incident Notification. If Altia becomes aware of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to Customer Data or Personal Data while processed by Altia, Customer(s) or User(s), Altia will promptly and without undue delay, through SIRT or PSIRT capabilities: Notify the Customer of the Security Incident. Investigate the Security Incident and provide affected Customer(s) or User(s) with detailed information about the Security Incident. Take reasonable steps to mitigate the effects and to minimise any damage resulting from the Security Incident. Notification(s) of Security Incidents will be delivered to affected Customer(s) or User(s) security representative, if known, by any means Altia selects, including email. It is a Customer(s) or User(s) responsibility to ensure management and administrators maintain accurate contact information for notification purposes. Customer(s) and User(s) are solely responsible for complying with its and their obligations under incident notification Mandatory Notifiable Data Breach laws as and if applicable to the Customer(s) and User(s), fulfilling any third party notification obligations related to any Security Incident applicable. Customer(s) and User(s) must notify Altia promptly of any possible misuse of its accounts or authentication credentials or any Security Incident related to the Altia Service(s) known to the Customer(s) and User(s). Altia shall make reasonable efforts to assist Customer(s) and User(s) in fulfilling the obligation under GDPR Article 33, or other applicable law or regulation to notify the relevant supervisory authority and data subjects about a Security Incident. Altia’s notification of or response to a Security Incident under this section clause is not an acknowledgment by Altia of any fault or liability with respect to the Security Incident.
