SECURITY ADDENDUM (ENTERPRISE SAAS)
Ohio Jurisdictional Version
KEY PROVISIONS
Data Breach Notification (Ohio Rev. Code Section 1349.19)
- Notify within 45 days of discovery
- Notify affected individuals
- Written, electronic, telephonic, or substitute notice permitted
Ohio Data Protection Act (Safe Harbor)
- Affirmative defense for entities with qualifying cybersecurity programs
- Must reasonably conform to NIST, ISO 27001, or similar frameworks
Personal Information Definition
Name with: SSN, driver's license, financial account number, credit/debit card.
Trade Secrets
Ohio UTSA (Ohio Rev. Code Section 1333.61 et seq.)
E-Signatures
Ohio UETA (Ohio Rev. Code Section 1306.01 et seq.)
Late Payment
Federal short-term rate + 3%; parties may contract for higher
Forum
Ohio (exclusive). Jury waiver permitted.
EXECUTION
☐ Master Agreement referenced ☐ Ohio-licensed counsel review