Breach Reporting Requirements. If Contractor has actual knowledge of a confirmed Data Breach that affects the security of any State Data that is subject to applicable data breach notification law, Contractor shall: (a) promptly notify DTS within 24 hours or sooner, unless shorter time is required by applicable law; (b) take commercially reasonable measures to address the Data Breach in a timely manner; and (c) be responsible for its Data Breach responsibilities, as provided in the next Section.
Appears in 9 contracts
Samples: Workforce Services, purchasing.utah.gov, purchasing.utah.gov
Breach Reporting Requirements. If Contractor has actual knowledge of a confirmed Data Breach that affects the security of any State Public Data that is subject to applicable data breach notification law, Contractor shall: (a) promptly notify DTS the Purchasing Entity or designee within 24 hours or sooner, unless shorter time is sooner or as required by applicable law; (b) take commercially reasonable measures to address the Data Breach in a timely manner; manner and (c) be responsible for its Data Breach responsibilities, as provided in the next Section.
Appears in 1 contract
Samples: Master Agreement
Breach Reporting Requirements. If Contractor has actual knowledge of a confirmed Data Breach that affects the security of any State Public Data that is subject to applicable data breach notification law, Contractor shall: (a) promptly notify DTS the Eligible User within 24 48 hours or sooner, unless shorter time is required by applicable law; (b) take commercially reasonable measures to address the Data Breach in a timely manner; and (c) be responsible for its Data Breach responsibilities, as provided in the next Section.
Appears in 1 contract
Samples: State of Utah Cooperative Contract
Breach Reporting Requirements. If the Contractor has actual knowledge of a confirmed Data Breach data breach that affects the security of any State Data content that is subject to applicable data breach notification law, the Contractor shall: shall (a1) promptly notify DTS the appropriate State-identified contact within 24 hours or sooner, unless shorter time is required by applicable law; , and (b2) take commercially reasonable measures to address the Data Breach data breach in a timely manner; and (c) be responsible for its Data Breach responsibilities, as provided in the next Section.
Appears in 1 contract
Samples: Attachment a Contract