Common use of Security Incidents Clause in Contracts

Security Incidents. If the Service Provider becomes aware of a Security Incident, the Service Provider will investigate and remediate the effects of the Security Incident in accordance with its internal policies and procedures and the requirements of law and regulation applicable to Service Provider. The Service Provider will notify the Client of any Security Incident as soon as reasonably practicable after the Service Provider becomes aware of a Security Incident, unless the Service Provider is subject to a legal or regulatory constraint, or if it would compromise the Service Provider’s investigation. The parties agree that where the Service Provider has no direct contractual relationship with Data Subjects whose data have been compromised in a Security Incident, the Client will be responsible for making any notifications to regulators and individuals that are required under applicable data protection law or regulation. The Service Provider will provide reasonable information and assistance to the Client to help the Client to meet its obligations to Data Subjects and regulators. Neither the Service Provider nor the Client will issue press or media statements or comments in connection with the Security Incident that name the other party unless it has obtained the other party’s prior written consent.

Security Incidents. If the Service Provider becomes aware of a Security Incident, the Service Provider will investigate and remediate the effects of the Security Incident in accordance with its internal policies and procedures and the requirements of law and regulation applicable to Service Provider. The Service Provider will notify the Client of any Security Incident as soon as reasonably practicable after the Service Provider becomes aware of a Security Incident, unless the Service Provider is subject to a legal or regulatory constraint, or if it would compromise the Service Provider’s 's investigation. The parties agree that where the Service Provider has no direct contractual relationship with Data Subjects whose data have been compromised in a Security Incident, the Client will be responsible for making any notifications to regulators and individuals that are required under applicable data protection law or regulation. The Service Provider will provide reasonable information and assistance to the Client to help the Client to meet its obligations to Data Subjects and regulators. Neither the Service Provider nor the Client will issue press or media statements or comments in connection with the Security Incident that name the other party unless it has obtained the other party’s 's prior written consent.

Security Incidents. If the Service Provider Custodian becomes aware of a Security Incident, the Service Provider Custodian will investigate and remediate the effects of the Security Incident in accordance with its internal policies and procedures and the requirements of applicable law and regulation applicable to Service Providerregulation. The Service Provider Custodian will notify the Client of any Security Incident as soon as reasonably practicable after the Service Provider Custodian becomes aware of a Security Incident, unless the Service Provider Custodian is subject to a legal or regulatory constraint, or if it would compromise the Service ProviderCustodian’s investigation. The parties agree that where the Service Provider Custodian has no direct contractual relationship with Data Subjects whose data have been compromised in a Security Incident, the Client will be responsible for making any notifications to regulators and individuals that are required under applicable data protection law or regulation. The Service Provider Custodian will provide reasonable information and assistance to the Client to help the Client to meet its obligations to Data Subjects and regulators. Neither the Service Provider Custodian nor the Client will issue press or media statements or comments in connection with the Security Incident that name the other party unless it has obtained the other party’s prior written consent.

Security Incidents. If the Service Provider becomes aware of a Security Incident, the Service Provider will investigate and remediate the effects of the Security Incident in accordance with its internal policies and procedures and the requirements of law and regulation applicable to Service Provider. The Service Provider will promptly notify the Client of any Security Incident as soon as reasonably practicable after the Service Provider becomes aware of a Security Incident, unless the Service Provider is subject to a legal or regulatory constraint, or if it would compromise the Service Provider’s investigation. The parties agree that where the Service Provider has no direct contractual relationship with Data Subjects whose data have been compromised in a Security Incident, the Client will be responsible for making any notifications to regulators and individuals that are required under applicable data protection law or regulation. The Service Provider will be financially responsible for Security Incidents caused by Service Provider Recipients and will provide reasonable information and assistance to the Client to help the Client to meet its obligations to Data Subjects and regulators. Neither the Service Provider nor the Client will issue press or media statements or comments in connection with the Security Incident that name the other party unless it has obtained the other party’s prior written consent.