...
- Set up a website relating to the incident
- Send a notification email to affected parties outlining the breach, their risk, and next steps, as well as linking to the website, within 72 hours of the incident, if feasible
- Send followup paper notifications to the same, where possible
- In general, provide any information, mitigation, or remedies mandated by law and/or by senior officers of the college
...