Response. Immediately upon becoming aware of a Security Breach, a complaint of a Security Breach or of circumstances that could have resulted in unauthorized access to or disclosure or use of District Data, Vendor will notify the District in writing, fully investigate the incident, cooperate fully with the District’s investigation of and response to the incident, and use best efforts to prevent any further Security Breach at Vendor’s expense in accordance with applicable privacy laws. Except as otherwise required by law, Vendor will not provide notice of the incident directly to individuals whose Personally Identifiable Information was involved, regulatory agencies, or other entities, without prior written permission from the District.
Appears in 15 contracts
Samples: Protection Agreement, Protection Agreement, Protection Agreement
Response. Immediately Except as otherwise expressly prohibited by law, promptly upon becoming aware of a Security Breach, a complaint of a Security Breach or of circumstances that could have resulted in unauthorized access to or disclosure or use of District Data, Vendor will notify the District in writing, fully investigate the incident, reasonably cooperate fully with the District’s investigation of and response to the incident, and use best commercially reasonable efforts to prevent any further Security Breach at Vendor’s expense in accordance with applicable privacy laws. Except as otherwise required by law, Vendor will not provide notice of the incident directly to individuals whose Personally Identifiable Information was involved, regulatory agencies, or other entities, without prior written permission from the District.
Appears in 1 contract
Samples: www.greeleyschools.org
Response. Immediately upon becoming aware of a Security Breach, a complaint of a Security Breach or of circumstances that could reasonably believed to have resulted in unauthorized access to or disclosure or use of District Data, Vendor will notify the District in writing, fully investigate the incident, cooperate fully with the District’s investigation of and response to the incident, and use best efforts to prevent any further Security Breach at Vendor’s expense in accordance with applicable privacy laws. Except as otherwise required by law, Vendor will not provide notice of the incident directly to individuals whose Personally Identifiable Information was involved, regulatory agencies, or other entities, without prior written permission from the District.
Appears in 1 contract
Samples: Protection Agreement
Response. Immediately Promptly upon becoming aware of a Security Breach, a complaint of a Security Breach or of circumstances that could have resulted in unauthorized access to or disclosure or use of District Data, Vendor will notify the District in writing, fully investigate the incident, reasonably cooperate fully with the District’s investigation of and response to the incident, and use best commercially reasonable efforts to prevent any further Security Breach at Vendor’s expense where such Security Breach is caused by Vendor and not by the negligence or misconduct of District or third parties beyond the control of Vendor in accordance with applicable privacy laws. Except as otherwise required by law, or other lawful order, Vendor will not provide notice of the incident directly to individuals whose Personally Identifiable Information was involved, regulatory agencies, or other entities, without prior written permission from the District.
Appears in 1 contract
Samples: Protection Agreement
Response. Immediately upon becoming aware of a Security Breach, a complaint of a Security Breach or of circumstances that could have resulted in unauthorized access to or disclosure or use of District Data, Vendor will notify the District in writing, fully investigate the incident, cooperate fully with the District’s investigation of and response to the incident, and use best efforts to prevent any further Security Breach at Vendor’s expense in accordance with applicable privacy laws. Except as otherwise required by law, Vendor will not provide notice of the incident directly to individuals whose Personally Identifiable Information was involved, regulatory agencies, or other entities, without prior written permission from the District.
Appears in 1 contract
Samples: 6 Data Protection Agreement