1. Notification.

1. Notification. Platform Science shall notify Customer within forty-eight (48) hours of becoming aware of a Data Security Incident. To the extent known, Platform Science shall provide Customer with a detailed description of the Data Security Incident, the type of data that was the subject of the Data Security Incident and, the identity of each affected person, as this information becomes available, as well as all other information and cooperation that Customer may reasonably request relating to the Data Security Incident. The parties shall cooperate in determining whether notification to affected individuals and/or government authorities is required under applicable data protection laws. If notification is required, Platform Science shall pay all reasonable costs of such notifications. For purposes of this DSI Policy, a “Data Security Incident” means any accidental, unauthorized or unlawful access, acquisition, theft, destruction, or disclosure of Customer Data that is in the possession of or under the control of Platform Science, or under the control of a third-party contracted with Platform Science to provide any portion of the PS Solutions provided under this Agreement, and results from the same.
   

2. Mitigation. Platform Science agrees to take action immediately, at its own expense, to investigate the Data Security Incident and to identify, prevent, and mitigate the effects of the Data Security Incident and, to carry out any recovery or other action necessary to remedy the Data Security Incident. Platform Science shall inform Customer of the steps it is taking to mitigate the effects of the Data Security Incident and to minimize the likelihood of another Data Security Incident happening.
   

2. Mitigation.

3. Publicity.

4. Cooperation.