EXAMPLES: Yes, under the PIPA, any ICSP who becomes aware of a personal <information incident> as described in question 2.5 must notify the data subject of the leaked information, without delay, including the following: (i) items of personal information affected (e.g., leaked); (ii) the timing of the leakage; (iii) the actions that can be taken by the data subject; (iv) the protective response measures taken by the ICSP; and (v) the name and contact information of the department to which the data subject can make inquires or file a report.