Common use of Disposition of Data Clause in Contracts

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no Upon written request is receivedfrom LEA during the term of the Agreement, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at obtained under the earliest of (a) DPA when it is no longer needed for the purpose for which it was obtained. LEA shall have thirty (30) days after termination or expiration (whichever is earlier) of its Service Agreement with Provider to notify Provider in writing that LEA wishes Provider to make available or otherwise transfer data in either a CSV or other mutually-agreeable format. After such thirty (30) day time period has expired, Provider shall use commercially reasonable efforts to dispose or delete all Student Data obtained or (b) as required by applicable lawunder the Service Agreement. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data personally identifiable data obtained under the Agreement any other writing beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain Student Generated Content. Disposition shall include commercially reasonable efforts to complete: (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student DataPupil Records; (2) erasing any Personally Identifiable Information contained in Student DataErasing; or (3) otherwise Otherwise modifying the Personally Identifiable Information contained personal information in Student Data those records to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAindecipherable. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletiondisposed. The duty to dispose of Student Data shall not extend to data that has been Dede-Identifiedidentified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a written request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within ten (10) calendar days of receipt of said request.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or LEA’s designee within sixty (60) days of the date of such written request by LEA, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAIdentified. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or LEA’s designee within sixty (60) days of the date of such written request by LEA, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate personal login to their account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAIdentified. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain DocuSign Envelope ID: EA37BEC2-C4B4-4442-B41D-4697AA74F723 Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain DocuSign Envelope ID: EA37BEC2-C4B4-4442-B41D-4697AA74F723 Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or XXX’s designee within sixty (60) days of the date of such written request by XXX, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law, which under Montana Pupil Online Personal Information Protection Act, is upon termination. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or LEA’s designee within sixty (60) days of the date of such written request by LEA, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law, which under Montana Pupil Online Personal Information Protection Act, is upon termination. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless DocuSign Envelope ID: BC7CFAA4-1B2E-4AF8-A9E4-DF22C8322FE1 a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to DocuSign Envelope ID: FA32EDF9-FABA-4292-AE46-8EDBFBF3295A transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or XXX’s designee within sixty (60) days of the date of such written request by XXX, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate personal login to their account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAIdentified. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless DocuSign Envelope ID: FC43EF30-2E23-4E58-88F8-67FC681E7BC5 a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to DocuSign Envelope ID: FA32EDF9-FABA-4292-AE46-8EDBFBF3295A transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or LEA’s designee within sixty (60) days of the date of such written request by LEA, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate personal login to their account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAIdentified. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless DocuSign Envelope ID: BC7CFAA4-1B2E-4AF8-A9E4-DF22C8322FE1 a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period (and in no event later than sixty (60) days) following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.

Disposition of Data. Provider shallExcept as otherwise provided herein, at XXXupon confirmed receipt of LEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is receivedby Provider’s Data Protection Officer, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at personally identifiable data obtained under the earliest of (a) DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (b60) days of the date of termination and according to a schedule and procedure as required the Parties may reasonably agree in a readable and usable format. Provider will make reasonable efforts toward providing the Student Data in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by applicable lawsubprocessors or agents of the Provider. Nothing Except as otherwise provided herein, nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data personally identifiable data obtained under the Agreement any other writing beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student DataPupil Records; (2) erasing any Personally Identifiable Information contained in Student DataErasing; or (3) otherwise Otherwise modifying the Personally Identifiable Information contained personal information in Student Data those records to make it unreadable or indecipherable or Deindecipherable. Permanent destruction of this Confidential Data must be non-Identified or placed in a separate student account, pursuant to the other terms of the DPArecoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletionwithin ninety (90) days. The duty to dispose of Student Data shall not extend to data (a) for which Provider has specifically obtained consent from the parent, legal guardian or eligible student to keep, through an agreement directly between the Provider and the student who is over eighteen (18) and/or parent/legal guardian (such separate agreement does not impact the Provider’s obligations to maintain and process Student Data in accordance with this DPA),, (b) that has been Dede-Identifiedidentified, or (c) is placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall make reasonable efforts to ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.Exhibit

Disposition of Data. Provider shall, at XXX’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or XXX’s designee within sixty (60) days of the date of such written request by XXX, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate personal login to their account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAIdentified. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period following a written request. Additionally, if a written request is received from LEA to transfer Personally Identifiable Information contained in Student Data to LEA, Provider shall transfer said Personally Identifiable Information contained in Student Data to LEA or LEA’s designee within sixty (60) days of the date of such written request by LEA, or as required by law, and according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider to retain for the purpose of storing Student Generated Content. Disposition shall include include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in a separate student account, pursuant to the other terms of the DPAIdentified. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletiondisposed. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form FORM, a copy of which is attached hereto as Exhibit “D”.D.

Disposition of Data. Provider shall, at XXXLEA’s request, dispose of or delete all Personally Identifiable Information contained in Student Data within a reasonable time period (and in no event later than sixty (60) days) following a written request. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained or (b) as required by applicable law. Nothing in the DPA authorizes Provider to maintain Personally Identifiable Information contained in Student Data obtained under the Agreement beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account Personal Login with Provider to retain Student Generated Content. Disposition shall include (1) the shredding of any hard copies of any Personally Identifiable Information contained in Student Data; (2) erasing any Personally Identifiable Information contained in Student Data; or (3) otherwise modifying the Personally Identifiable Information contained in Student Data to make it unreadable or indecipherable or De-Identified or placed in maintained to use with a separate student account, Personal Login pursuant to the other terms of the DPA. Provider shall provide written notification to LEA when the Personally Identifiable Information contained in Student Data has been disposed pursuant to the LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been De-Identified. The LEA may employ a “Request for Return or Deletion of Student Data” substantially in the form attached hereto as Exhibit “D”.