Legal Security Event Reporting Form

LEGAL SECURITY EVENT REPORTING FORM

This Legal Security Event Reporting Form is entered into by and between Reporter Name: (Reporter) and Recipient Name: (Recipient), effective as of .

RECITALS

WHEREAS, Reporter possesses or processes information, systems, or services that may contain Confidential Information or Personal Data, and desires to provide prompt notice and cooperative remediation in the event of any Security Event affecting such information; and

WHEREAS, Recipient has contractual, regulatory, and legal interests in being notified of Security Events that materially affect Recipient's operations, obligations to data subjects, or compliance obligations; and

WHEREAS, the parties agree to the procedures and obligations set forth in this Form to ensure timely reporting, preservation of evidence, and coordinated remediation of Security Events.

NOW, THEREFORE, in consideration of the mutual covenants contained herein, the parties agree as follows.

1. DEFINITIONS

1.1 "Security Event" means any confirmed or reasonably suspected unauthorized access to, use, disclosure, alteration, loss or destruction of information, systems, or services under the control of Reporter or Recipient that compromises the confidentiality, integrity or availability of such information or systems.

1.2 "Personal Data" means any information relating to an identified or identifiable natural person as defined under applicable law, including but not limited to name, identification numbers, financial information, and authentication credentials.

2. REPORTING OBLIGATIONS

2.1 Within of discovery of a Security Event, Reporter shall provide Recipient written notice that includes the information specified in Section 3 and any additional information reasonably requested by Recipient for compliance with law or contractual obligations.

2.2 Initial notice shall be delivered by the methods set forth in Section 11 and shall be followed by supplemental written reports as additional material facts become known.

3. INCIDENT DETAILS

3.1 Incident Date and Time: Month Day Year Time

4. SCOPE OF AFFECTED INFORMATION

4.1 Types of information reasonably believed to be affected (check all that apply):

Personal Data Confidential Business Information System Credentials

Financial Data Other:

5. RESPONSE AND REMEDIATION

5.1 Immediate Actions Taken: Reporter shall describe actions taken to contain and mitigate the Security Event. Reporter represents that it has implemented reasonable steps to remediate the threat and to prevent further unauthorized access.

5.3 Regulatory or law-enforcement notifications made or planned: Yes No

6. EVIDENCE PRESERVATION

6.1 Reporter shall preserve all logs, records, forensic images, chain-of-custody documentation and other materials that may be relevant to the Security Event and shall not alter or destroy such materials without the prior written consent of Recipient or as required by law.

Preservation status: Preserved Pending Not Preserved (explain)

7. INVESTIGATION AND COOPERATION

7.1 Each party shall cooperate in good faith with the other's investigations and remediation efforts, including providing reasonable access to systems, personnel, and documentation and delivering requested information within of a written request, subject to any applicable legal privilege or confidentiality constraints.

8. CONFIDENTIALITY

8.1 Information exchanged under this Form concerning a Security Event shall be treated as Confidential Information. Recipient shall not disclose such information except (a) to comply with legal obligations, (b) to its legal or regulatory advisors, or (c) with the prior written consent of Reporter. Any permitted disclosure shall be limited to the minimum necessary information.

9. INDEMNIFICATION

9.1 To the extent permitted by law, the party responsible for the Security Event shall indemnify, defend and hold harmless the other party from and against any third-party claims, liabilities, losses, costs and expenses (including reasonable attorneys' fees) arising directly from such Security Event, except to the extent that the claim results from the indemnitee's own gross negligence or willful misconduct.

10. LIMITATIONS

10.1 Nothing in this Form shall be interpreted to create rights in third parties or to expand either party's liability beyond that required by applicable law, except as expressly provided herein.

11. NOTICES

11.3 Notices shall be effective upon receipt when delivered by hand, next business day if sent by reputable overnight courier, or upon confirmed transmission if sent by electronic mail to the designated contacts at the respective notice addresses.

12. MISCELLANEOUS

Governing Law: This Form shall be governed by and construed in accordance with the laws of the state or jurisdiction identified by the Recipient in notices, without regard to choice of law principles.

Entire Agreement: This Form constitutes the entire agreement between the parties with respect to Security Event reporting and supersedes all prior communications and understandings on the subject.

Severability: If any provision of this Form is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

Amendments and Waiver: Any amendment to this Form must be in writing and signed by both parties. A waiver of any right under this Form must be in writing to be effective.

Counterparts: This Form may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument. Electronic signatures shall be binding and treated as originals.

ADDITIONAL INFORMATION AND ATTACHMENTS

Sign Now