Contractor’s Employees and Subcontractors (a) Contractor shall only disclose PII to Contractor’s employees and subcontractors who need to know the PII in order to provide the Services and the disclosure of PII shall be limited to the extent necessary to provide such Services. Contractor shall ensure that all such employees and subcontractors comply with the terms of this DPA.
(b) Contractor must ensure that each subcontractor performing functions pursuant to the Service Agreement where the subcontractor will receive or have access to PII is contractually bound by a written agreement that includes confidentiality and data security obligations equivalent to, consistent with, and no less protective than, those found in this DPA.
(c) Contractor shall examine the data security and privacy measures of its subcontractors prior to utilizing the subcontractor. If at any point a subcontractor fails to materially comply with the requirements of this DPA, Contractor shall: notify the EA and remove such subcontractor’s access to PII; and, as applicable, retrieve all PII received or stored by such subcontractor and/or ensure that PII has been securely deleted and destroyed in accordance with this DPA. In the event there is an incident in which the subcontractor compromises PII, Contractor shall follow the Data Breach reporting requirements set forth herein.
(d) Contractor shall take full responsibility for the acts and omissions of its employees and subcontractors.
(e) Contractor must not disclose PII to any other party unless such disclosure is required by statute, court order or subpoena, and the Contractor makes a reasonable effort to notify the EA of the court order or subpoena in advance of compliance but in any case, provides notice to the EA no later than the time the PII is disclosed, unless such disclosure to the EA is expressly prohibited by the statute, court order or subpoena.
Professional Liability (Errors and Omissions) For consultant contracts, insurance appropriate to Consultant’s profession, with limit no less than $1,000,000 per occurrence or claim, $2,000,000 aggregate.
Employees and Subcontractors The Contractor shall ensure that PII is not disclosed to employees, subcontractors, or other persons or entities unless they have a legitimate educational interest and only for purposes necessary to provide services under the Contract. The Contractor agrees that it will not utilize any subcontractors or outside entities to provide services outside the Contract and shall not disclose any PII other than as required in this DPA. Contractor shall ensure that all employees and subcontractors comply with the terms of this DPA and are provided with any training on all applicable state and federal laws and regulations that protect the confidentiality of PII before being provided access to PII. If disclosure of PII is required by law or court order, the Contractor shall notify the BOCES and New York State Education Department no later than the time the PII disclosure is required unless such notice is expressly prohibited by law or the court order.
