A data breach event is a loss or release of personal information held by a Member or its contracted professional entity
A data breach event is the loss, theft, accidental release or accidental publication of personally identifying information or personally sensitive information about one or more affected individuals. At the time of the breach the information must be in the care, custody or control of a Member, or of a professional entity with which the Member has a contract and to which the Member has entrusted the information. If the date of the breach cannot be determined, it is deemed to be the date the Member first became aware of the loss, theft, release or publication. For data breach coverage, personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of an affected individual, including Social Security numbers or account numbers. Personally sensitive information is private information about an individual whose release requires notification of affected individuals under applicable law.
Supporting quotations
Data breach event
a. Data breach event means the loss, theft, accidental release or accidental publication of personally identifying information or personally sensitive information as respects one or more affected individuals. At the time of the breach, such information must be in the care, custody or control of:
(1) A Member; or
(2) A professional entity with whom a Member has a contract and to whom a Member has entrusted the information.
b. With respect to coverage B.2.h. Data Breach, if the date of the data breach event as defined in a. above cannot be determined, such date shall be deemed to be the date a Member first become aware of the loss, theft, release or publication of the personally identifying information or personally sensitive information.
b. With respect to coverage B.2.h. Data Breach, personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of an affected individual. This includes, but is not limited to, Social Security numbers or account numbers.
Personally sensitive information means private information specific to an individual, the release of which requires notification of affected individuals under any applicable law.
Qualifications & exceptions
The Schedule card for this program lists Data Breach as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Not stated here
The definition of personally sensitive information refers to notification requirements under "any applicable law" without naming one.
Data Access & Collection · Context
Personally identifying information is data usable for fraud, such as account numbers; public data is excluded
Personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of a Member. It includes, but is not limited to, Social Security numbers, account numbers, passwords or login credentials, or other methods to access or control a computing device or connected home device system identification. For data breach coverage the same idea applies to an affected individual, without the login-credential wording. It does not include information otherwise available to the public, such as names and addresses.
Supporting quotations
Personally identifying information
a. Personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of a Member. This includes, but is not limited to, Social Security numbers, account numbers, passwords or login credentials, or other methods to access or control a computing device or connected home device system identification.
b. With respect to coverage B.2.h. Data Breach, personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of an affected individual. This includes, but is not limited to, Social Security numbers or account numbers.
c. Personally identifying information does not mean or include information that is otherwise available to the public, such as names and addresses.
Data Access & Collection · Context
Public information is not personally identifying information; personally sensitive information turns on notification law
Personally identifying information does not include information that is otherwise available to the public, such as names and addresses. Personally sensitive information means private information specific to an individual, the release of which requires notification of affected individuals under any applicable law. Both terms are used by the stolen identity event and data breach definitions, and the general definition of personally identifying information is the one that includes Social Security numbers, account numbers and login credentials.
Supporting quotations
c. Personally identifying information does not mean or include information that is otherwise available to the public, such as names and addresses.
Personally sensitive information means private information specific to an individual, the release of which requires notification of affected individuals under any applicable law.
Personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of a Member.
personally identifying information means information, including health information, that could be used to commit fraud or other illegal activity involving the credit, access to health care or identity of an affected individual.
Not stated here
The definition of personally sensitive information refers to notification requirements under "any applicable law" without naming a law.