Laserfiche WebLink
3. "Electronic Data" means information, facts or programs stored as or on, created or used on, or transmitted to <br />or from computer software (including systems and applications software), hard or floppy disks, CD-ROMS, �. <br />tapes, drives, cells, data processing devices or any other media which are used with electronically controlled <br />equipment. <br />4. "Network Security or Data Breach Event" means: <br />a. Transmission of malware from your "computer system" to a third party; <br />b. The inability of an authorized user to access your website or your "computer system" because of a denial <br />of service attack; or <br />c. A "privacy event". <br />As used in this definition, a denial of service attack means a malicious attack intended by the perpetrator to <br />overwhelm the capacity of your "computer system" or website by sending an excessive volume of "electronic <br />data" to such "computer system" or website in order to prevent authorized access to it. <br />5. 'Personally identifiable information" means any: <br />a. Individual's name in combination with any one or more of the following: <br />(1) Social security number, <br />(2) Drivers license number or any other state identification number; <br />(3) Medical or healthcare data including protected health information; <br />(4) Any account number, credit card number or debit card number; <br />(5) Any account relationships, account balances or account histories; or <br />(6) Any password, access code or other security code that would permit access to a financial account. <br />b. Non-public personal information as defined in any part of the following statutes or regulations which <br />regulate the use and protection of non-public personal information (as defined in such statutes or <br />regulations): <br />(1) Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the rules and regulations <br />promulgated thereunder, as amended; <br />(2) Gramm -Leach Bliley Act of 1999 (GLBA) and the rules and regulations promulgated thereunder, as <br />amended; or <br />(3), Other state; feaeraior iocai privacy iavirs requiring �easonabie`sec`urity within a 'computer system for <br />non-public personal information, or a privacy policy limiting the sale, disclosure or sharing of non- <br />public personal information or providing individuals with the' right to access or collect non-public <br />personal information. <br />6. "Privacy Event" means: <br />a. Unauthorized disclosure of, loss of, theft of, or unintentional delivery or exposure to others of "personally <br />identifiable information" or "confidential corporate information" which is in the insured's care, custody or <br />control. Such disclosure, loss, theft or unintentional delivery or exposure to others is limited to <br />information obtained or released directly from your "computer system"; or <br />b. Failure by you to disclose or warn of actual or potential disclosure or misappropriation of "personally <br />identifiable information" or "confidential corporate information", but only if this endorsement covers such <br />disclosure or misappropriation and it resulted directly from a. above; or <br />c. Violation or the investigation of a violation of any federal, state or local privacy statute addressing <br />disclosure or misappropriation of "personally identifiable information" or "confidential corporate <br />information", but only if this endorsement covers such disclosure or misappropriation and it resulted <br />directly from a. above. <br />7. "Privacy Event Mitigation Expense" means: <br />a. Reasonable and necessary fees and expenses for: <br />(1) An outside vendor to conduct a computer forensic analysis with reasonable allocation of time and <br />resources to investigate your "computer system" to determine the cause and extent of a "privacy <br />event'; <br />(2) An approved crisis management or legal firm to review the "privacy event" and advise you on the <br />appropriate response; <br />(3) Travel by directors, executive officers, partners or employees of the insured which is done to mitigate <br />damage from the "privacy event"; <br />(4) Printing, advertising, mailing of materials or other costs to provide notice to affected parties of a <br />"privacy event" for the purposes of maintaining good will or compliance with any notification <br />requirements imposed by law; and <br />GL 4000 10 16 McNeil & co.. 2016 Page 8 of 9 <br />Includes copyrighted material of Insurance Services Office, Inc. with its permission. 114 <br />