Common use of MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT Clause in Contracts

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. Contractor designates , as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. Contractor designates , as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon requestexecution of this Agreement. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, upon written request for return or destruction of pupil records, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will provide written request to Contractor and the principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any written inspection request. The As determined by the rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any written amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District District’s written instruction to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal accountaccount to the extent available through the Contractor’s services. Contractor designates its Chief Privacy Officer (xxxxxxx@xxxxxxxxxxx.xxx), as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation A summary of this training including its scope, duration, and date of completion will be provided to the School District upon written request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification as soon as feasible to the School District of any confirmed unauthorized disclosure of pupil information. Contract Contractor will coordinate with assist the School District with any information the School District requests to notify provide any legally required notifications to the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. Contractor designates Xxxx Xxxxxxx, Director - Software & Cloud Engineering, as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Nevertheless, Contractor may keep copies and/or backups of data as part of its disaster recovery storage system, provided such data is (a) inaccessible to the public; (b) unable to be used in the normal course of business by the Contractor; and (c) deleted after a maximum term of thirteen (13) months. Upon completion of this Agreement, and written request by District. Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil, to the extent such transfer is feasible. Specifically, the School District will have the ability to download names, responses, results and grades obtained by students in their assignments (i.e., student gradebooks) at any time. Except as otherwise provided in the laws, return or transfer of data, other than the names, responses, results and grades obtained by students in their assignments, to the School District, shall not apply if proven to be incompatible with the Service, technically impossible or to involve a disproportionate effort for the Contractor. In the event transfer of data is requested prior to data deletion, and such transfer is not feasible, Contractor shall proceed to deletion of personal information in a manner consistent with the terms of this Agreement if so requested by the School District in writing. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal accountin accordance with the above described limitations. Contractor designates its Chief Security Officer, as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that the designated employees have employee has completed training in pupil information security and confidentiality. Documentation Where available, documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party Contractor of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. Contractor designates Xxx Xxxxx , as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors, upon written request. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment requestrequest that School District is unable to address itself. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. Contractor designates Xxx Xxxxxxx , as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. Contractor designates CommonLit , as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor Contractor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District automatically delete pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractorsin 30 days and 65 days within all backups. This requirement does not apply to pupil-generated content generatedcontent if a pupil chooses to establish or maintain an account with the third party thirdparty for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal School District personnel written request identifying the information they wish to inspect. The principal School District personnel will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal SchoolDistrict personnel clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s personal account. See Exhibit B for the transfer requirements and form. Contractor designates , Xxxx Xxxxxxxxxx as the primary employees employee responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District within two (2) business days of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by this Agreement. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreement, Contractor will provide written certification to the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractors. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a student. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-generated content to a pupil’s 's personal account. Contractor designates , tA�A(_�A1 . as the primary employees responsible to ensure the security and confidentiality of pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon requestexecution of this Agreement. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately provide written notification to the School District of any unauthorized disclosure of pupil information. Contract will coordinate with the School District to notify the parent, legal guardian, or pupil affected by an unauthorized disclosure of the pupil's records.

MONTANA PUPIL ONLINE PERSONAL INFORMATION PROTECTION ACT. In accordance with the Montana Pupil Online Personal Information Protection Act, pupil records continue to be the property of and under the control of the school district. Contractor is prohibited from using any information in pupil records for any purpose other than those required or specifically permitted by the underlying services agreement and/or this AgreementAgreement in order to perform the services. Contactor is specifically prohibited from using personally identifiable information in pupil records to engage in targeted advertising. By executing With the exception of any information that Contractor is required to retain for legal, regulatory, or audit purposes, upon termination of the underlying services agreement and this Agreement, Contractor certifies that pupil records will not be retained or available upon completion of the terms of the Agreement. Upon completion of this Agreementand following District’s request, Contractor will provide written certification to return the School District pupil records are no longer held, possessed or otherwise available to Contractor or its employees, agents, or subcontractorsDistrict’s data in a mutually agreeable electronic format. This requirement does not apply to pupil-generated content if a pupil chooses to establish or maintain an account with the third party for the purpose of storing that content. Parents, guardians and eligible pupils have the right to inspect the personal information held by the Contractor. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to inspect. The principal will make arrangements for access and notify the requesting party of the time and place the information may be inspected. Contractor will cooperate with a reasonable request of the School District to accommodate any inspection request. The rights contained in this section are denied to any person against whom an order of protection has been entered concerning a studentstudent and District, if such is applicable with any inspection request, shall notify Contractor so that the request is not completed. Parents/guardians or eligible pupils may ask the School District to amend a personal information held by the Contractor they believe is inaccurate, misleading, irrelevant, or improper. They should write the school principal clearly identifying the part of the record they want changed and specify the reason. Contractor will cooperate with a reasonable request of the School District to accommodate any amendment request. If the District decides not to amend the record as requested by the parent(s)/guardian(s) or eligible student, the District will notify the parent(s)/guardian(s) or eligible pupil of the decision and advise him or her of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent(s)/guardian(s) or eligible student when notified of the right to a hearing. Parents/guardians or eligible pupils may ask the School District to transfer possession of personal information held by the Contractor to the pupil. Parents, guardians, or pupils should submit to the school principal written request identifying the information they wish to transfer. Contractor will cooperate with a reasonable request of the School District to accommodate any transfer request including providing options by which a pupil may transfer pupil-pupil- generated content to a pupil’s personal account. Contractor designates , as the primary Contractor’s employees responsible to ensure the receive training pertaining security and confidentiality of personally identifying information and pupil records. By signing this agreement, Contractor certifies that designated employees have completed training in personally identifying information and pupil information security and confidentiality. Documentation of this training including its scope, duration, and date of completion will be provided to the School District upon request. Compliance with this requirement does not, in itself, absolve the third party of liability in the event of an unauthorized disclosure of pupil records. Contractor will immediately promptly provide written notification to the School District of any confirmed, unauthorized disclosure of personally identifying information or pupil informationinformation within Contractor’s possession. Contract will coordinate with the School District District’s customer notification to notify the parent, legal guardian, or pupil affected by an the confirmed unauthorized disclosure of personally identifying information or pupil information, will be delivered by the pupil's recordsDistrict in conformance with the PCI DSS requirements, and all applicable state and federal laws, and in good faith cooperation with Contractor.