Cyber risk: Duties in the event of an occurrence, claim or suit

In the event of a privacy breach that may trigger a claim, campuses must follow their established local breach or incident response process or the UC Privacy and Data Security Incident Response Plan.

Campus risk management and/or the UCOP Office of Risk Services must be notified as soon as possible.  If the privacy breach triggers an obligation for the University to comply with breach notice laws, the University has resources available to assist with breach notice response services and incident response and loss control information.

Campus risk management and/or the UCOP Office of Risk Services will notify the University’s insurance broker or the respective insurance company’s Claims Representative as soon as possible. Documentation of the incident, including log files, is essential.  Be sure to follow the procedures in the established local breach or incident response process or the UC Privacy and Data Security Incident Response Plan.

Physical loss or damage to University hardware, software or data would be covered under the University’s Property program, subject to the standard terms and conditions of the current Property Insurance Policy.