Laserfiche WebLink
DATA BREACH COVERAGE - DEFENSE AND LIABILITY <br />15. In connection with a "data breach claim" <br />caused by the failure to comply with any state, <br />federal or foreign regulation and/or self - <br />regulatory requirements around minimum data <br />security standards, including, but not limited <br />to, the Fair and Accurate Credit Transaction <br />Act (FACTA), and Song Beverly Act or similar <br />statutes. However, this exclusion does not <br />apply to reasonable and necessary legal fees <br />and expenses incurred in the defense of a <br />"regulatory proceeding". <br />F. WHO IS AN INSURED <br />If you are designated in the Policy Declarations as: <br />1. An individual, you and your spouse are <br />insureds, but only with respect to the conduct <br />of a business of which you are the sole owner. <br />2. A partnership or joint venture, you are an <br />insured. Your members, your partners, and <br />their spouses are also insureds, but only with <br />respect to the conduct of your business. <br />3. A limited liability company, you are an insured. <br />Your members are also insureds, but only with <br />respect to the conduct of your business. Your <br />managers are insureds, but only with respect <br />to their duties as your managers. <br />4. An organization, other than a partnership, joint <br />venture or limited liability company, you are an <br />insured. Your executive officers and directors <br />are insureds, but only with respect to their <br />duties as your officers or directors. <br />5. A trust, you are an insured. Your trustees are <br />also insureds, but only with respect to their <br />duties as trustees. <br />G. CONDITIONS <br />1. The first named insured must pay all <br />premiums when due. We will pay any return <br />premium to the first named insured. <br />2. If valid and collectible insurance is available <br />for a "loss" we cover under this Coverage <br />Part, we will share with that other insurance. <br />If all the other insurance permits contribution <br />by equal shares, we will follow this method <br />also. Under this approach each insurer <br />contributes by equal amounts until it has paid <br />its applicable limit of insurance or none of the <br />"loss" remains, whichever comes first. <br />If the other insurance does not permit <br />contribution by equal shares, we will contribute <br />by limits. Under this method, each insurer's <br />share is based on the ratio of its applicable <br />limit of insurance to the total applicable limits <br />of insurance of all insurers. <br />3. If you refuse to consent to a settlement or <br />compromise recommended by us and elect to <br />contest the "data breach claim", our liability <br />Page 4 of 5 <br />shall not exceed the amount for which we <br />would have been liable for "loss" if the "data <br />breach claim" had been so settled when and <br />as so recommended, (minus any applicable <br />deductible) and we shall have the right to <br />withdraw from the further defense of the "data <br />breach claim" by tendering control of the <br />defense thereof to you. <br />4. Immediately upon discovery of a "data <br />breach", you must take all reasonable steps to <br />mitigate potential damages to third parties by <br />providing reasonable and necessary <br />notification, monitoring and other services, as <br />directed through our designated third party <br />provider or by a third party provider that is <br />approved by us. <br />5. Our obligation to pay "loss" will only be in <br />excess of the applicable deductible as stated <br />in the Coverage Part Declarations. <br />H. BASIC EXTENDED REPORTING PERIOD <br />We will automatically provide a Basic Extended <br />Reporting Period if this Coverage Part is: <br />1. Cancelled; <br />2. Non -renewed; or <br />3. Renewed by us with insurance that does not <br />apply on a claims made or claims made and <br />reported basis. <br />The Basic Extended Reporting Period begins with the <br />end of the "policy period" and lasts for 30 days. <br />The Basic Extended Reporting Period is provided <br />at no charge. <br />Under this provision, you have 30 days after the <br />end of the "policy period" to report to us in writing <br />"data breach claims" first made against any of you <br />during the "policy period". <br />The Basic Extended Reporting Period will not <br />reinstate or increase the Limits of Insurance. <br />SUPPLEMENTAL EXTENDED REPORTING <br />PERIOD <br />A Supplemental Extended Reporting Period is <br />available, but only by an endorsement and for an <br />extra charge. This supplemental period, if <br />purchased, will run concurrently with the automatic <br />Extended Reporting Period set forth in paragraph <br />H. above. <br />You must give us a written request for the <br />endorsement within 30 days after the end of the <br />"policy period". The Supplemental Extended <br />Reporting Period will not go into effect unless you <br />pay the additional premium promptly when due. <br />The Supplemental Extended Reporting Period will <br />not reinstate or increase the Limits of Insurance <br />ew cF RAMwagementDMsian <br />Jy/ \'x REVIEWED & APPROVED BY.- <br />V"° <br />--� Risk janagement Analyst <br />