Orange County NC Website
<br />EPS++ <br />tech + pro + media + security + privacy <br /> <br />GSL2302XX (Ed 6/11) <br />Page 8 <br />Copyright © 2011 CNA. All Rights Reserved. <br />B. ends with the earlier of: <br />1. the date and time Commerce Operations are restored to substantially the level of operation that existed prior <br />to the Network Impairment; or, <br />2. the date and time Commerce Operations would have been restored to substantially the level of operation <br />that existed prior to the Network Impairment if the Insured Entity exercised due diligence in remediating <br />such Network Impairment. <br />Personal Information means any information relating to an identified or identifiable natural person. <br />Policy Period means the period from the effective date of this Policy to the Policy expiration date stated in the <br />Declarations, or its earlier cancellation date. <br />Pollutants means any substance exhibiting hazardous characteristics as is or may be defined or identified on any list <br />of hazardous substances issued by the United States Environmental Protection Agency or any state, local or foreign <br />counterpart. Pollutants also means, without limitation, any solid, liquid, gaseous or thermal irritant or contaminant, <br />including smoke, vapor, soot, fumes, acids, alkalis, chemicals or waste (including materials to be recycled, <br />reconditioned or reclaimed), as well as any air emission, odor, waste water, oil or oil products, infectious or medical <br />waste, asbestos, or asbestos products or any noise. <br />Privacy Event means any act, error or omission which, in the reasonable opinion of an Executive Officer did cause <br />or is reasonably likely to result in the unauthorized disclosure or the unauthorized use of Protected Information. <br />Privacy Event Expenses means all reasonable and necessary fees, costs and expenses incurred by the Insured <br />Entity and consented to by the Insurer: <br />A. to directly effect compliance with a Security Breach Notice Law including notification to individuals or entities <br />who are required to be notified; <br />B. to provide voluntary notification to individuals or entities whose Protected Information may have been subject to <br />a Privacy Event; <br />C. to hire a computer forensics firm to investigate the existence and cause of a Privacy Event and to determine the <br />extent such Protected Information has been or may have been disclosed; <br />D. to hire an attorney or expert to determine the applicability of and the actions necessary to comply with Security <br />Breach Notice Laws; <br />E. to minimize harm to the Insured Entity’s reputation from a Privacy Event, including but not limited to the costs to <br />set up a call center or provide a credit monitoring service for those impacted by a Privacy Event. <br />However, Privacy Event Expenses do not include the costs, fees and expenses necessary to remediate any <br />deficiencies that gave rise to the Privacy Event. <br />Privacy Injury means: <br />A. unauthorized collection, disclosure, use, access, destruction or modification of Protected Information; <br />B. failure to implement, maintain, or comply with policies and procedures stating the Insured’s obligations with <br />regard to Protected Information. <br />DocuSign Envelope ID: 57A293A7-E790-41D7-BF18-E42777ABBC47