Laserfiche WebLink
b. The security breach notification-described above in section 2(a) shall include,at a <br /> minimum,the following information, if it is available or can be readily provided: <br /> I. The name and contact information of the reporting SAPL subject to this <br /> section. <br /> ii. A list of the types of personal information that were or are reasonably <br /> believed to have been the subject of a breach. <br /> III. If the information is possible to determine at the time the notice is <br /> provided, then either(1)the date of the breach, (2)the estimated date of <br /> the breach, or(3)the data range within which the breach occurred. The <br /> notification shall also include the date of the notice. <br /> iv. Whether the notification was delayed as a result of a law enforcement <br /> Investigation, if that Information is possible to determine at the time the <br /> notice is provided. <br /> v. A general description of the breach incident, if that information is <br /> possible to determine at the time the notice is provided. <br /> c. At SAUSD's discretion, the security breach notification may also include any of <br /> the following: <br /> I. Information about what the SAPL has reasonably done to protect <br /> individuals whose information has been breached. <br /> ii. If feasible, provide basic advice on steps that the person whose <br /> information has been breached may take to protect himself or herself. <br /> d. SAPI_agrees to adhere to all requirements in applicable State and in federal law <br /> with respect to a data breach related to the student data, including,when <br /> appropriate or required,the required responsibilities and procedures for <br /> notification and mitigation of any such data breach. <br /> e. SAPL further acknowledges and agrees to have a written response plan that <br /> reflects best practices and is consistent with industry standards and federal and <br /> state law for responding to a data breach, breach of security, privacy incident or <br /> unauthorized acquisition or use of student data or any portion thereof, including <br /> personally identifiable information and agrees to provide SAUSD, upon request, <br /> with a copy of said written incident response plan. <br /> Page 4 of 9 <br />