Artikel 13

1. In case a Security Breach involving the Classified Information of the Providing Party is suspected or ascertained by the Receiving Party, the Competent Security Authority of the Receiving Party shall inform the Competent Security Authority of the Providing Party in writing as soon as possible. The notice must contain sufficient details for the Originator to assess the consequences and circumstances of the suspected or actual violation.
2. The Receiving Party shall immediately investigate any actual or potential Security Breach. The Competent Security Authority of the Providing Party shall, if required, cooperate in the investigation. The Originator shall be informed of the outcome of the proceedings and the measures undertaken in connection with the Security Breach.
3. The Competent Security Authority of the Receiving Party shall take appropriate measures in accordance with its national laws and regulations to limit the consequences and to prevent a recurrence of the security incident. The Competent Security Authority of the Providing Party shall be informed of the outcome of the investigation and, if any, of the measures taken.
4. In case a Security Breach occurs outside of the jurisdiction of one of the Parties when Classified Information is sent from one Party to the other Party via Third Parties’ territories or from one Party to a Third Party with the prior written consent of the Providing Party, the Competent Security Authority of the sending Party, shall, to the extent possible, take the actions referred to in paragraph 1of this Article without undue delay.