When to Notify

• Do consider:

  • Most Expedient Time Possible

  • Without Unreasonable Delay

  • But after necessary measures to determine the scope of the breach and restore integrity

  • Delay if law enforcement determines it impedes a criminal investigation