Extract to table

Coverage limits must remain at or above $10,000,000 per occurrence and $20,000,000 in the aggregate, consistent with the DPA's requirements

This general authorization is subject to a critical procedural requirement: Skybridge must provide Meridian with at least thirty (30) days' prior written notice before engaging any new sub-processor or replacing an existing sub-processor

Under the FDIC/OCC Computer-Security Incident Notification Rule (12 CFR Part 53, effective April 1, 2022), Meridian is required to notify its primary federal regulator (the OCC) within thirty-six (36) hours of determining that a "notification incident" has occurred — i

Notification under Article 33 must be made within seventy-two (72) hours of becoming aware of the breach

A processor must adhere to the instructions of the controller regarding the processing of personal data

A processor must assist the controller in responding to consumer rights requests, including requests for access, correction, deletion, and data portability