2025-378-E-IT Dept-RecTrac-Remove CYMS module

Browse Search

Docusign Envelope ID:C101DF94-8EEA-4210-A163-1FB71C9DF46C CNA E PS+ tech + pro + media + security + privacy B. ends with the earlier of: 1. the date and time Commerce Operations are restored to substantially the level of operation that existed prior to the Network Impairment; or, 2. the date and time Commerce Operations would have been restored to substantially the level of operation that existed prior to the Network Impairment if the Insured Entity exercised due diligence in remediating such Network Impairment. Personal Information means any information relating to an identified or identifiable natural person. Policy Period means the period from the effective date of this Policy to the Policy expiration date stated in the Declarations, or its earlier cancellation date. Pollutants means any substance exhibiting hazardous characteristics as is or may be defined or identified on any list of hazardous substances issued by the United States Environmental Protection Agency or any state, local or foreign counterpart. Pollutants also means, without limitation, any solid, liquid, gaseous or thermal irritant or contaminant, including smoke, vapor, soot, fumes, acids, alkalis, chemicals or waste (including materials to be recycled, reconditioned or reclaimed), as well as any air emission, odor, waste water, oil or oil products, infectious or medical waste, asbestos, or asbestos products or any noise. Privacy Event means any act, error or omission which, in the reasonable opinion of an Executive Officer did cause or is reasonably likely to result in the unauthorized disclosure or the unauthorized use of Protected Information. Privacy Event Expenses means all reasonable and necessary fees, costs and expenses incurred by the Insured Entity and consented to by the Insurer: A. to directly effect compliance with a Security Breach Notice Law including notification to individuals or entities who are required to be notified; B. to provide voluntary notification to individuals or entities whose Protected Information may have been subject to a Privacy Event; C. to hire a computer forensics firm to investigate the existence and cause of a Privacy Event and to determine the extent such Protected Information has been or may have been disclosed; D. to hire an attorney or expert to determine the applicability of and the actions necessary to comply with Security Breach Notice Laws; E. to minimize harm to the Insured Entity's reputation from a Privacy Event, including but not limited to the costs to set up a call center or provide a credit monitoring service for those impacted by a Privacy Event. However, Privacy Event Expenses do not include the costs, fees and expenses necessary to remediate any deficiencies that gave rise to the Privacy Event. Privacy Injury means: A. unauthorized collection, disclosure, use, access, destruction or modification of Protected Information; B. failure to implement, maintain, or comply with policies and procedures stating the Insured's obligations with regard to Protected Information. GSL2302XX (Ed 6/11) Page 8 Copyright©2011 CNA. All Rights Reserved.