Legal advice

If a breach occurs that may require notification under relevant breach notice laws or regulations, legal services are included with your policy to assist in the investigation and response. The BBR Services team will arrange legal services for you and will connect you to these experts.

Breach investigation

In the event external assistance is needed to assess the impact of a breach on your computer system, forensic services will be provided to help to determine the existence, cause and scope of the breach, and the extent to which notification must be provided to comply with Breach Notice Laws.

The computer security expert that provides forensic services will require access to information, files and systems, and it is important for you to comply with the expert’s requests and cooperate with the investigation. Reports or findings of the expert will be made available to you, us, the BBR Services team and any attorney that you retain to provide advice with regard to the incident.

Breach response

Notification and call center services
Following an actual or suspected breach, the BBR Services team will assist you with arranging notification and call center services. The BBR Services team will walk you through details such as how to work with privacy counsel to develop notification letters and the process for providing these notification letters, as well as any other required deliverables, to the notification vendor in a timely manner. Call center services will be available for up to 90 days and during standard business hours.

The BBR Services team will also walk you through developing a set of frequently asked questions (FAQs) for use by the call center and how to anticipate and prepare for call escalations.

Credit and identity monitoring
Your policy includes one and three bureau credit monitoring, identity monitoring as well as identity restoration services. The BBR Services team will advise you on which products or solutions may be applicable for a particular breach incident.

A product or solution may be offered where reasonably practicable and only to the extent available in a particular jurisdiction. Notified Individuals have up to 90 days from your mailing of the notification to enroll in an offered product or solution. Enrollees of an offered product or solution will have access to the services provided under such product or solution for 12 months from the date of their enrollment.