Laserfiche WebLink
DATA BREACH COVERAGE - RESPONSE EXPENSE <br />4. that we designate or approve prior to the <br />start of any services. You will have a direct <br />relationship with the provider and all <br />services providers work for you. <br />We are not liable for any act or omission by <br />any third party provider of services. <br />5. All "data breach(es)" that occur at the same <br />time, or are caused by the same act, error, <br />omission, defect or deficiency, or series of <br />related acts, errors, omissions, defects or <br />deficiencies, shall be considered to be a <br />single "data breach", regardless of the <br />number of claimants, victims, or the number <br />of entities that obtained access to the <br />"personally identifiable information" involved <br />in the breach. <br />H. DEFINITIONS <br />The following definitions only apply to this form <br />and any supplemental coverages or amendatory <br />endorsements added to it by endorsement. <br />1. " Coverage territory" means all parts of the <br />world, provided that no trade or economic <br />sanction, embargo, insurance or other laws or <br />regulations prohibit us from paying " data <br />breach expenses" in relation to the " data <br />breach" . Payment of " data breach expenses" <br />relating to notification expenses is only <br />available in jurisdictions or countries that <br />maintain data breach notice laws that requires <br />notification of victims of a " data breach" . <br />2. "Data breach" means the loss, theft, <br />accidental release or accidental publication of <br />"personally identifiable information", or <br />circumstances objectively giving rise to a <br />substantial risk that such a loss, theft, release <br />or publication has occurred. <br />3. "Data breach expenses" means reasonable: <br />a. Notification expenses to notify a person <br />whose "personally identifiable information" <br />was the subject of a " data breach" in <br />compliance with mandatory "data breach" <br />notification statutes or regulations. <br />Form SS 00 47 03 16 <br />b. Crisis management expenses to perform <br />services by any public relations firm, crisis <br />management firm or law firm to minimize <br />potential harm to the insured. Crisis <br />management expenses also includes the <br />fees and costs of a company hired to <br />operate a call center to handle inquiries <br />from the parties affected by a " data <br />breach" . <br />c. Monitoring service expenses to provide <br />" data breach" victims with credit, fraud, <br />public records or other monitoring alerts <br />for up to one year, if determined to be <br />warranted by us or the service provider. <br />d."Good faith advertising services". <br />e. "Legal and forensic services". <br />4. " Good faith advertising services" means <br />services provided to assist in organizing the <br />insured's media responses in relation to a <br />" data breach" . <br />5. " Legal and forensic services" means <br />reimbursement for the verification of <br />compliance with data breach notification laws. <br />" Legal and forensic services" also provides <br />coverage for the investigation of computer <br />hacking incidents, lost and stolen property, <br />cyber extortion, database fraud and <br />determinations as to whether or not data was <br />accessed. <br />6. "Personally identifiable information" means an <br />individual' s social security number, bank <br />account number, credit and debit card account <br />numbers, PIN numbers or transaction history, <br />driver's license number, medical diagnosis, <br />patient history and medications and any other <br />applicable private information that may be <br />defined by state, federal or applicable foreign <br />law. <br />7. "Policy period" means the time beginning with <br />the effective date shown in the Coverage Part <br />Declarations and ending with the earlier of: <br />a.The date of cancellation; or <br />b.The expiration date shown in the <br />Coverage Part Declarations. <br />8. "Retroactive date" means the date displayed <br />on the Coverage Part Declarations. If no date <br />is entered on the Coverage Part Declarations, <br />the "retroactive date" is the same as the <br />effective date. <br />ew cF RAMwagementDMsian <br />Jy/\'x REVIEWED & APPROVED BY: <br />V"° <br />--� Risk janagement Analyst <br />