Notification of personal data breach. 1. In case of any personal data breach, the data processor shall, without undue delay after having become aware of it, notify the data controller of the personal data breach.
2. The data processor’s notification to the data controller shall, if possible, take place within 24 hours after the data processor has become aware of the personal data breach to enable the data controller to comply with the data controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33
Notification of personal data breach. In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 Regulation (EU) 2016/679 or under Articles 34 and 35 Regulation (EU) 2018/1725, where applicable, taking into account the nature of processing and the information available to the processor.
Notification of personal data breach. 1. In case of any personal data breach, the data processor shall, without undue delay after having become aware of it, notify the data controller of the personal data breach.
2. The data processor’s notification to the data controller shall, if possible, take place within 48 hours after the data processor has become aware of the personal data breach to enable the data controller to comply with the data controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33
Notification of personal data breach. 1. In case of a personal data breach, the Data Processor must, without undue delay after having become aware of it, notify the Data Controller of the personal data breach.
2. The Data Processor’s notification to the Data Controller should, if possible, take place within 48 hours after the Data Processor has become aware of the personal data breach to enable the Data Controller to comply with the Data Controller’s obligation to notify the personal data breach to the competent supervisory authority, cf. Article 33 of the GDPR.
3. In accordance with Term 9(2)(a), the Data Processor must assist the Data Controller in notifying the personal data breach to the competent supervisory authority, meaning that the Data Processor is required to assist in obtaining the information listed below which, pursuant to Article 33(3) of the GDPR, must be stated in the Data Controller’s notification to the competent supervisory authority:
a. The nature of the personal data including where possible, the categories and approximate number of Data Subjects concerned and the categories and approximate number of personal data records concerned;
b. the likely consequences of the personal data breach;
c. the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.
4. All the elements to be provided by the Data Processor when assisting the Data Controller in the noti- fication of a personal data breach to the competent supervisory authority are specified in Appendix D.
Notification of personal data breach. The Contractor notifies the Company of all the Personal Data Breaches without undue delay after the Contractor becomes aware of or its Sub-Processor becomes aware of the Personal Data Breach, but not later than within 24 (twenty-four) hours from the moment when the Contractor or the Sub-Processor becomes aware of the Personal Data Breach. If requested by the Company, the Contractor must without undue delay provide the Company with all appropriate information of the Personal Data Breach. To the extent that this information is held by the Contractor, the notification must describe at least: the Personal Data Breach that has taken place; as far as possible, the categories and approximate number of data subjects concerned and the categories and approximate number of the Personal Data records concerned; description of the likely consequences of the Personal Data Breach; description of the remedial actions that the Contractor has taken or must take to prevent future Personal Data Breach and, if necessary, also measures to mitigate its possible adverse effects; the name and contact details of the data protection officer or other contact point where more information can be obtained; and any other necessary and available information that the Company needs in order to be able to take appropriate safeguards and meet its obligations of notification of a Personal Data Breach to the supervisory authority and, if applicable, to the affected data subjects. The Contractor must without delay document the results of the investigation and the actions taken for the Company, comprising the facts relating to the Personal Data Breach, its effects and the remedial action taken. The Company is responsible for necessary notifications to the supervisory authorities.
Notification of personal data breach. 7.1 In case of any Personal Data breach, the Supplier shall notify the Customer of the Personal Data breach without undue delay after the Supplier has become aware of the Personal Data breach to enable the Customer to comply with the Customer’s obligation to notify the Personal Data breach to the competent supervisory.
7.2 In accordance with Section 6.2 a), the Supplier shall assist the Customer in notifying the Personal Data breach to the competent Supervisory Authority, meaning that the Supplier is required to assist in obtaining the information listed below which, pursuant to Article 33(3) GDPR, shall be stated in the Customer’s notification to the competent Supervisory Authority:
a) The nature of the Personal Data including where possible, the categories and approximate number of Data Subjects concerned and the categories and approximate number of Personal Data records concerned;
b) the likely consequences of the Personal Data breach;
c) the measures taken or proposed to be taken by the controller to address the Personal Data breach, including, where appropriate, measures to mitigate its possible adverse effects.
Notification of personal data breach. In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 of Regulation (EU) 2016/679 or [for GH being an EC/EU only] under Articles 34 and 35 of Regulation (EU) 2018/1725, where applicable, taking into account the nature of processing and the information available to the processor.
Notification of personal data breach. 1. In case of any personal data breach, the Data Processor shall, without undue delay after having become aware of it, notify the Data Controller of the personal data breach.
2. The Data Processor’s notification to the Data Controller shall, if possible, take place within immediately and no later than 24 hours after the Data Processor has become aware of the breach of the personal data security after the Data Processor has become aware of the personal data breach to enable the Data Controller to comply with the Data Controller’s obligation to notify the personal data breach to the supervisory authority, cf. Article 33
Notification of personal data breach. 2.6.1 OT shall notify the Customer of a Personal Data Breach without undue delay after OT becoming aware of it by email to a Customer email address on file with OT, along with any necessary documentation to enable the Customer, where necessary, to notify this breach to the Data Subject and / or the competent Supervisory Authority.
2.6.2 If available and taking into account the nature of the Processing, the notification in accordance with Section 2.6.2 shall at least:
A. describe the nature of the Personal Data Breach including where possible, the categories and approximate number of Data Subjects concerned, and the categories and approximate number of Personal Data records concerned;
B. communicate the name and contact details of the data protection officer or other contact point where more information can be obtained;
C. describe the likely consequences of the Personal Data Breach; and
D. describe the measures taken or proposed to be taken by OT to address the Personal Data Breach, including, where appropriate, measures to mitigate its possible adverse effects.
2.6.3 Where, and in so far as, it is not possible to provide the information at the same time, the information may be provided in phases without undue further delay.
2.6.4 The Customer (or the party acting as Controller) is responsible to notify the Personal Data Breach to the Supervisory Authority, and to the Data Subjects, when this is required by the applicable Data Protection Legislation.
Notification of personal data breach. In the event of a Personal Data Breach, we shall cooperate with and reasonably assist You to comply with Your obligations under applicable Data Protection Laws, taking into account the nature of Processing and the information available to Us.
