Reporting Lost, Compromised or Potentially Compromised PII Clause Samples
Reporting Lost, Compromised or Potentially Compromised PII a.) When the End-User becomes aware or suspects that PII has been lost, compromised, or potentially compromised the End-User, in accordance with its incident reporting process, shall provide immediate notification of the incident to CSI who will notify the primary SSA contact.
b.) The End-User shall provide complete and accurate information about the details of the possible PII loss to assist the SSA contact/alternate, including the following information:
1. Contact information;
2. A description of the loss, compromise, or potential compromise (i.e., nature of loss, compromise, potential compromise, scope, number of files or records, type of equipment or media, etc.) including the approximate time and location of the loss;
Reporting Lost, Compromised or Potentially Compromised PII. (a) When the Requesting Party or its Authorized User becomes aware or suspects that ▇▇▇ has been lost, compromised, or potentially compromised the Requesting Party, in accordance with its incident reporting process, shall provide immediate notification of the incident to the primary SSA contact. If the primary SSA contact is not readily available, the Requesting Party shall immediately notify one of two SSA alternates, if names of alternates have been provided. (See Section XVI for the phone numbers of the designated primary and alternate SSA contacts.) The Requesting Party shall act to ensure that each Authorized User has been given information as to who the primary and alternate SSA contacts are and how to contact them.
(b) The Requesting Party shall provide the primary SSA contact or the alternate, as applicable, with updates on the status of the reported PII loss or compromise as they become available but shall not delay the initial report.
(c) The Requesting Party shall provide complete and accurate information about the details of the possible PII loss to assist the SSA contact/alternate, including the following information:
1. Contact information;
2. A description of the loss, compromise, or potential compromise (i.e., nature of loss/compromise/potential compromise, scope, number of files or records, type of equipment or media, etc.) including the approximate time and location of the loss;
Reporting Lost, Compromised or Potentially Compromised PII. Office of Data Exchange, Policy Publications, and International Negotiations Project Manager: Michael Wilkins 410-966-4965 Alternate Contact: Curtis Miller 410-966-2370