CTR066194_Exhibit_G.pdf

PDF 180 KB Posted

Attached to
Master Agreement AZ|CTR066194
Contract number
CTR066194
Issued by
Arizona

About this file

This document is a Data Breach Report Form (Exhibit G) associated with Contract CTR066194 - Amendment 4 for the Arizona Department of Economic Security (ADES). The form is designed to be submitted within 24 hours of a data breach incident by a contracted organization, providing a standardized method for reporting and documenting potential security incidents involving sensitive information.

The form requires detailed documentation of a data breach, including the date of occurrence, date of notification to ADES, a description of the incident, the organization's response, how affected survivors/clients were notified, and preventative measures for future data breaches. Critically, the form emphasizes protecting Personally Identifying Information (PII) and instructs organizations to use generic terms like "Survivor" or "client" when describing the incident. After submission, ADES will review the report and contact the organization within one business day to confirm receipt and discuss next steps.

View the file

Other files

Show all 26

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Agency Name:

Date of data breach:

Date ADES was notified about the data breach:

Describe Incident: (Please provide as much detail as possible, without disclosing any of the Survivor's personally identifying information) Organization’s response to the data breach, including how affected survivors/clients were notified:

Describe how the organization will prevent data breaches in the future:

(ADES will fill out) ADES Response to organization and date:

EXHIBIT G

CTR066194 ‐ Amendment 4

Arizona Department of Economic Security

DATA BREACH REPORT FORM

Instructions: Please submit this form along with your current Data Breach Policy within 24 hours of the incident to your Contract Specialist and Program Specialist. Once ADES receives this form, they will contact you within one (1) business day for confirmation that it was received and next steps, as appropriate. For questions about this form, please emai your Contract Specialist and Program Specialist.

DO NOT include any of a Survivor’s Personally Identifying Information (PII). PII includes but is not limited to a Survivor’s first or last name, address, email, phone number, and any other information that would serve to identify them. If the situation involves a Survivor, you can use the term “Survivor” or “client.”

File details come from the government source that posted it. Updated .