Common use of Reimbursement of Expenses Associated with Security Breach Clause in Contracts

Reimbursement of Expenses Associated with Security Breach. In the event of a Security Breach that is attributable to the Provider, the Provider shall, subject to the limitations of liabilities in the Service Agreement, reimburse the LEA for all reasonable “Notification Related Costs.” Notification Related Costs are limited to internal and external costs associated with addressing and responding to a confirmed Security Breach, including but not limited to: (a) preparation and mailing or other transmission of notifications required by applicable law; (b) establishment of an adequate call center and other communications procedures in response to the confirmed Security Breach; (c) costs for remediation measures such as credit monitoring or reporting services for affected individuals for at least twelve (12) months in relation to a Security Breach that involves social security numbers, or to the extent required by law. With respect to any Security Breach which does not result from a breach of the security obligations in this DPA by the Provider, its agents, or Subprocessors acting on its behalf, any third-party notifications, if any, shall be at the LEA’s expense.

Reimbursement of Expenses Associated with Security Breach. In the event of a Security Breach that Breachthat is attributable to the Provider, the Provider shall, subject to the limitations of liabilities in the Service Agreement, reimburse the LEA for all reasonable “Notification Related Costs.” Notification Related Costs are limited to internal and external costs associated with addressing and responding to a confirmed Security Breach, including but not limited to: (a) preparation and mailing or other transmission of notifications required by applicable law; (b) establishment of an adequate call center and other communications procedures in response to the confirmed Security Breach; (c) costs for remediation measures such as credit monitoring or reporting services for affected individuals for at least twelve (12) months in relation to a Security Breach that involves social security numbers, or to the extent required by law. With respect to any Security Breach which does not result from a breach of the security obligations in this DPA by the Provider, its agents, or Subprocessors acting on its behalf, any third-party notifications, if any, shall be at the LEA’s expense.