New Hampshire Specific Data Security Requirements The Provider agrees to the following privacy and security standards from “the Minimum Standards for Privacy and Security of Student and Employee Data” from the New Hampshire Department of Education. Specifically, the Provider agrees to:
(1) Limit system access to the types of transactions and functions that authorized users, such as students, parents, and LEA are permitted to execute;
(2) Limit unsuccessful logon attempts;
(3) Employ cryptographic mechanisms to protect the confidentiality of remote access sessions;
(4) Authorize wireless access prior to allowing such connections;
(5) Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity;
(6) Ensure that the actions of individual system users can be uniquely traced to those users so they can be held accountable for their actions;
(7) Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles;
(8) Restrict, disable, or prevent the use of nonessential programs, functions, ports, protocols, and services;
(9) Enforce a minimum password complexity and change of characters when new passwords are created;
(10) Perform maintenance on organizational systems;
(11) Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance;
(12) Ensure equipment removed for off-site maintenance is sanitized of any Student Data in accordance with NIST SP 800-88 Revision 1;
(13) Protect (i.e., physically control and securely store) system media containing Student Data, both paper and digital;
(14) Sanitize or destroy system media containing Student Data in accordance with NIST SP 800-88 Revision 1 before disposal or release for reuse;
(15) Control access to media containing Student Data and maintain accountability for media during transport outside of controlled areas;
(16) Periodically assess the security controls in organizational systems to determine if the controls are effective in their application and develop and implement plans of action designed to correct deficiencies and reduce or eliminate vulnerabilities in organizational systems;
(17) Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems;
(18) Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception);
(19) Protect the confidentiality of Student Data at rest;
(20) Identify, report, and correct system flaws in a timely manner;
(21) Provide protection from malicious code (i.e. Antivirus and Antimalware) at designated locations within organizational systems;
(22) Monitor system security alerts and advisories and take action in response; and
(23) Update malicious code protection mechanisms when new releases are available.
Notification of Xxxxxx and Unauthorized Release (a) Vendor will promptly notify the District of any breach or unauthorized release of Protected Data it has received from the District in the most expedient way possible and without unreasonable delay, but no more than seven (7) calendar days after Vendor has discovered or been informed of the breach or unauthorized release.
(b) Vendor will provide such notification to the District by contacting Xxxxxx Xxx, Data Protection Officer, directly by email at xxxxxx.xxx@xxxxx.xxx or by calling 000-000-0000.
(c) Vendor will cooperate with the District and provide as much information as possible directly to Xxxxxx Xxx, Data Protection Officer or his/her designee about the incident, including but not limited to: a description of the incident, the date of the incident, the date Vendor discovered or was informed of the incident, a description of the types of Protected Data involved, an estimate of the number of records affected, the schools within the District affected, what the Vendor has done or plans to do to investigate the incident, stop the breach and mitigate any further unauthorized access or release of Protected Data, and contact information for Vendor representatives who can assist affected individuals that may have additional questions.
(d) Vendor acknowledges that upon initial notification from Vendor, the District, as the educational agency with which Vendor contracts, has an obligation under Section 2-d to in turn notify the Chief Privacy Officer in the New York State Education Department (“CPO”). Vendor agrees not to provide this notification to the CPO directly unless requested by the District or otherwise required by law. In the event the CPO contacts Vendor directly or requests more information from Vendor regarding the incident after having been initially informed of the incident by the District, Vendor will promptly inform Xxxxxx Xxx, Data Protection Officer or his/her designee.
Documentation Required The certificates and endorsements shall be received and approved by the District before Work commences. As an alternative, the Contractor may submit certified copies of any policy that includes the required endorsement language set forth herein.
Registration Requirements The Company shall use its reasonable best efforts to effect the registration of the resale of the Registrable Securities (including, without limitation, the execution of an undertaking to file post-effective amendments, appropriate qualification under applicable blue sky or other state securities laws and appropriate compliance with applicable regulations issued under the Securities Act) as would permit or facilitate the resale of all the Registrable Securities in the manner (including manner of sale) and in all states reasonably requested by the Holder. Such reasonable best efforts by the Company shall include, without limitation, the following:
(a) The Company shall, as expeditiously as possible after the filing of the Report on Form 10-K for the year ended December 31, 2004, including the filing of a Form 10-K/A containing a management report and an auditor’s report on the effectiveness of the Company’s internal control over financial reporting within the time permitted under Exchange Act Release No. 50754 (November 30, 2004) (collectively, the “Company’s 2004 10-K”):
(i) But in any event within 30 days of the filing of the Company’s 2004 10-K, prepare and file a registration statement with the Commission pursuant to Rule 415 under the Securities Act on Form S-3 under the Securities Act (or in the event that the Company is ineligible to use such form, such other form as the Company is eligible to use under the Securities Act provided that such other form shall be converted into an S-3 promptly after Form S-3 becomes available to the Company) covering resales by the Holders as selling stockholders (not underwriters) of the Registrable Securities (the “Registration Statement”). The number of shares of Common Stock initially included in such Registration Statement shall be no less than the sum of (A) the Shares and (B) the Warrant Shares issuable upon full exercise of the Warrant. Thereafter the Company shall use its reasonable best efforts to cause such Registration Statement and other filings to be declared effective as soon as possible, and in any event prior to 90 days (or, if the SEC elects to review the Registration Statement, 180 days) following the filing of the Company’s 2004 10-K (the “Effectiveness Deadline”). Without limiting the foregoing, the Company will promptly respond to all SEC comments, inquiries and requests, and shall request acceleration of effectiveness at the earliest possible date. The Company shall provide the Holders reasonable opportunity to review the portions of any such Registration Statement or amendment or supplement thereto containing disclosure regarding the Holders prior to filing.
(ii) Prepare and file with the SEC such amendments and supplements to such Registration Statement and the prospectus used in connection with such Registration Statement as may be necessary to comply with the provisions of the Act with respect to the disposition of all securities covered by such Registration Statement and notify the Holders of the filing and effectiveness of such Registration Statement and any amendments or supplements.
(iii) Furnish to each Holder such numbers of copies of a current prospectus conforming with the requirements of the Act, copies of the Registration Statement, any amendment or supplement thereto and any documents incorporated by reference therein and such other documents as such Holder may reasonably require in order to facilitate the disposition of Registrable Securities owned by such Holder.
(iv) Register and qualify the securities covered by such Registration Statement under the securities or “blue sky” laws of all domestic jurisdictions, to the extent required; provided that the Company shall not be required in connection therewith or as a condition thereto to qualify to do business or to file a general consent to service of process in any such states or jurisdictions.
(v) Notify each Holder immediately of the happening of any event (but not the substance or details of any such events unless specifically requested by a Holder) as a result of which the prospectus (including any supplements thereto or thereof) included in such Registration Statement, as then in effect, includes an untrue statement of material fact or omits to state a material fact required to be stated therein or necessary to make the statements therein not misleading in light of the circumstances then existing, and use its reasonable best efforts to promptly update and/or correct such prospectus.
(vi) Notify each Holder immediately of the issuance by the Commission or any state securities commission or agency of any stop order suspending the effectiveness of the Registration Statement or the threat or initiation of any proceedings for that purpose. The Company shall use its reasonable best efforts to prevent the issuance of any stop order and, if any stop order is issued, to obtain the lifting thereof at the earliest possible time.
(vii) Permit counsel to the Holders to review the Registration Statement and all amendments and supplements thereto within a reasonable period of time (but not less than two (2) full Trading Days) prior to each filing and will not request acceleration of the Registration Statement without prior notice to such counsel.
(viii) List the Registrable Securities covered by such Registration Statement on the principal securities exchange and/or market on which the Common Stock is then listed and prepare and file any required filings with such principal market or exchange.
(b) In the event the Registration Statement has become effective and, afterwards, any Holder’s ability to sell Registrable Securities under the Registration Statement is suspended for more than (i) 45 days in any 90-day period or (ii) 90 days in any calendar year, including without limitation by reason of any suspension or stop order with respect to the Registration Statement or the fact that an event has occurred as a result of which the prospectus (including any supplements thereto) included in such Registration Statement then in effect includes an untrue statement of material fact or omits to state a material fact required to be stated therein or necessary to make the statements therein not misleading in light of the circumstances then existing, then the Company shall take such action as may be necessary to amend or supplement such Registration Statement or prospectus such that such Registration Statement or prospectus, as so amended, shall not contain an untrue statement of a material fact or omit to state a material fact required to be stated therein or necessary to make the statements not misleading.
(c) If the Holder(s) intend to distribute the Registrable Securities by means of an underwriting, the Holder(s) shall so advise the Company. Any such underwriting may only be administered by nationally or regionally recognized investment bankers reasonably satisfactory to the Company.
(d) The Company shall enter into such customary agreements (including an underwriting agreement containing such representations and warranties by the Company and such other terms and provisions, as are customarily contained in underwriting agreements for comparable offerings and are reasonably satisfactory to the Company) and take all such other actions as the Holder or the underwriters participating in such offering and sale may reasonably request in order to expedite or facilitate such offering and sale other than such actions which are disruptive to the Company or require significant management availability.
(e) The Company shall make available for inspection by the Holders, representative(s) of all the Holders together, any underwriter participating in any disposition pursuant to a Registration Statement, and any attorney or accountant retained by any Holder or underwriter, all financial and other records customary for purposes of the Holders’ due diligence examination of the Company and review of any Registration Statement, all documents filed with the SEC subsequent to the Closing, pertinent corporate documents and properties of the Company, and cause the Company’s officers, directors and employees to supply all information reasonably requested by any such representative, underwriter, attorney or accountant in connection with such Registration Statement, provided that such parties agree to keep such information confidential. Notwithstanding the foregoing, the foregoing right shall not extend to any Holder (i) who is not a financial investor or entity or (ii) who, itself or through any affiliate, has any strategic business interest that would reasonably be expected to be in conflict with any business of the Company or its Subsidiaries.
(f) The Company may suspend the use of any prospectus used in connection with the Registration Statement only in the event, and for such period of time as, (i) such a suspension is required by the rules and regulations of the Commission or (ii) it is determined in good faith by the Board of Directors of the Company that because of valid business reasons (not including the avoidance of the Company’s obligations hereunder), it is in the best interests of the Company to suspend such use, and prior to suspending such use in accordance with this clause (ii) the Company provides the Holders with written notice of such suspension, which notice need not specify the nature of the event giving rise to such suspension. The Company will use reasonable best efforts to cause such suspension to terminate at the earliest possible date.
(g) The Company shall prepare and file with the SEC such amendments (including post-effective amendments) and supplements to a Registration Statement and the prospectus used in connection with such Registration Statement, which prospectus is to be filed pursuant to Rule 424 promulgated under the Securities Act, as may be necessary to keep such Registration Statement effective at all times during the Registration Period (as defined below), and, during such period, comply with the provisions of the Securities Act with respect to the disposition of all Registrable Securities of the Company covered by such Registration Statement. In the case of amendments and supplements to a Registration Statement which are required to be filed pursuant to this Agreement (including pursuant to this Section 3(h)) by reason of the Company filing a report on Form 10-K, Form 10-Q or Form 8-K or any analogous report under the 1934 Act, the Company shall have incorporated such report by reference into such Registration Statement, if applicable, or shall file such amendments or supplements with the SEC on the same day on which the 1934 Act report is filed which created the requirement for the Company to amend or supplement such Registration Statement.
(h) Each Holder agrees by its acquisition of the Registrable Securities that, upon receipt of a notice from the Company of the occurrence of any event of the kind described in Sections 5.2(a)(v) or 5.2(a)(vi), and upon notice of any suspension under Section 5.2(f), such Holder will forthwith discontinue disposition of such Registrable Securities under the Registration Statement until such Holder’s receipt of the copies of the supplemented Prospectus and/or amended Registration Statement contemplated by Section 5.2, or until it is advised in writing by the Company that the use of the applicable Prospectus may be resumed, and, in either case, has received copies of any additional or supplemental filings that are incorporated or deemed to be incorporated by reference in such Prospectus or Registration Statement. The Company may provide appropriate stop orders to enforce the provisions of this paragraph.
(i) If requested by a Holder, the Company shall (i) as soon as practicable incorporate in a prospectus supplement or post-effective amendment such information as a Holder reasonably requests to be included therein relating to the sale and distribution of Registrable Securities, including, without limitation, information with respect to the number of Registrable Securities being offered or sold, the purchase price being paid therefor and any other terms of the offering of the Registrable Securities to be sold in such offering; (ii) as soon as practicable make all required filings of such prospectus supplement or post-effective amendment after being notified of the matters to be incorporated in such prospectus supplement or post-effective amendment; and (iii) as soon as practicable, supplement or make amendments to any Registration Statement if reasonably requested by a Holder holding any Registrable Securities.
Documentation Requirements ODM shall pay the MCP after it receives sufficient documentation, as determined by ODM, detailing the MCP’s Ohio Medicaid-specific liability for the Annual Fee. The MCP shall provide documentation that includes the following:
1. Total premiums reported on IRS Form 8963;
Construction Requirements (a) All Life and Safety and applicable Building Codes will be strictly enforced (i.e., tempered glass, fire dampers, exit signs, smoke detectors, alarms, etc.). Prior coordination with the Building Manager is required.
(b) Electric panel schedules must be brought up to date identifying all new circuits added.
(c) All electrical outlets and lighting circuits are to be properly identified. Outlets will be labeled on back side of each cover plate.
(d) All electrical and phone closets being used must have panels replaced and doors shut at the end of each day’s work. Any electrical closet that is opened with the panel exposed must have a work person present.
(e) All electricians, telephone personnel, etc. will, upon completion of their respective projects, pick up and discard their trash leaving the telephone and electrical rooms clean. If this is not complied with, a clean-up will be conducted by the building janitors and the general contractor will be back-charged for this service.
(f) Welding or burning with an open flame will not be done without prior approval of the Building Manager. Fire extinguishers must be on hand at all times.
(g) All “anchoring” of walls or supports to the concrete are not to be done during normal working hours (7:30 AM—6:00 PM, Monday through Friday). This work must be scheduled before or after these hours during the week or on the weekend.
(h) All core drilling is not to be done during normal working hours (7:30 AM—6:00 PM, Monday through Friday). This work must be scheduled before or after these hours during the week or on the weekend.
(i) All HVAC work must be inspected by the Building Engineer. The following procedures will be followed by the general contractor:
i) A preliminary inspection of the HVAC work in progress will be scheduled through the Building Office prior to the reinstallation of the ceiling grid.
ii) A second inspection of the HVAC operation will also be scheduled through the Building Office and will take place with the attendance of the HVAC contractor’s Air Balance Engineer. This inspection will take place when the suite in question is ready to be air-balanced. [***] = CONFIDENTIAL INFORMATION HAS BEEN OMITTED AND FILED SEPARATELY WITH THE SECURITIES AND EXCHANGE COMMISSION. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH RESPECT TO THIS OMITTED INFORMATION.
iii) The Building Engineer will inspect the construction on a periodic basis as well.
(j) All existing thermostats, ceiling tiles, lighting fixtures and air conditioning grilles shall be saved and turned over to the Building Engineer.
Application Requirements This application shall contain, as a minimum, a sketch showing the location of proposed facilities; a description, sketch, manufacturer’s brochure, etc. of the proposed facilities; and a description of the operation proposed. (11-28-90) 101. -- 199. (RESERVED) 200. OPERATIONAL AGREEMENT.
Review of legality and data minimisation (a) The data importer agrees to review the legality of the request for disclosure, in particular whether it remains within the powers granted to the requesting public authority, and to challenge the request if, after careful assessment, it concludes that there are reasonable grounds to consider that the request is unlawful under the laws of the country of destination, applicable obligations under international law and principles of international comity. The data importer shall, under the same conditions, pursue possibilities of appeal. When challenging a request, the data importer shall seek interim measures with a view to suspending the effects of the request until the competent judicial authority has decided on its merits. It shall not disclose the personal data requested until required to do so under the applicable procedural rules. These requirements are without prejudice to the obligations of the data importer under Clause 14(e).
(b) The data importer agrees to document its legal assessment and any challenge to the request for disclosure and, to the extent permissible under the laws of the country of destination, make the documentation available to the data exporter. It shall also make it available to the competent supervisory authority on request.
Authorization Required Prior to Parallel Operation 2.2.1 The NYISO, in consultation with the Connecting Transmission Owner, shall use Reasonable Efforts to list applicable parallel Operating Requirements in Attachment 5 of this Agreement. Additionally, the NYISO, in consultation with the Connecting Transmission Owner, shall notify the Interconnection Customer of any changes to these requirements as soon as they are known. The NYISO and Connecting Transmission Owner shall make Reasonable Efforts to cooperate with the Interconnection Customer in meeting requirements necessary for the Interconnection Customer to commence parallel operations by the in-service date.
2.2.2 The Interconnection Customer shall not operate its Small Generating Facility in parallel with the New York State Transmission System or the Distribution System without prior written authorization of the NYISO. The NYISO, in consultation with the Connecting Transmission Owner, will provide such authorization once the NYISO receives notification that the Interconnection Customer has complied with all applicable parallel Operating Requirements. Such authorization shall not be unreasonably withheld, conditioned, or delayed.
Compliance with Xxxxxxxx-Xxxxx Act The Company will comply with all applicable securities and other laws, rules and regulations, including, without limitation, the Xxxxxxxx-Xxxxx Act, and use its best efforts to cause the Company’s directors and officers, in their capacities as such, to comply with such laws, rules and regulations, including, without limitation, the provisions of the Xxxxxxxx-Xxxxx Act.
