NWEA Responsibilities. Subject to the limitations of warranty set forth in Section 15 of the Agreement, NWEA shall maintain commercially reasonable privacy and data security controls, including policies, procedures, and training, to protect the confidentiality, integrity, and availability of Student Education Records. NWEA has an incident response program that specifies the actions to be taken in the event of a Security Breach. NWEA shall notify Subscriber by email or telephone in accordance with applicable state law or without unreasonable delay, whichever occurs sooner, after a Security Breach. In the event of a Security Breach, Subscriber shall cooperate fully with NWEA so that NWEA can comply with its notification obligations to the affected parent(s), legal guardian(s), eligible student(s), or any other parties for which notification by NWEA is required under applicable state law.
NWEA Responsibilities. Subject to the limitations of warranty set forth in Section 18 (Limited Warranty) of the Agreement, within NWEA's sole discretion and to the extent commercially reasonable, NWEA shall maintain the necessary and appropriate privacy and data security controls to secure Student Education Records. NWEA has commercially reasonable policies and procedures and trains appropriate staff members to secure and maintain the confidentiality of Student Education Records. NWEA has an incident response program that specifies the actions to be taken when NWEA detects a Security Breach. In accordance with applicable state law, NWEA shall notify Subscriber by email or telephone, without unreasonable delay, after confirmation of a Security Breach. In the event of a Security Breach, Subscriber shall cooperate fully with NWEA so that NWEA can comply with its notification obligations to the affected parent(s), legal guardian(s) or eligible student(s) or any other parties for which notification by NWEA is required under applicable state law.
NWEA Responsibilities. Subject to the limitations of warranty set forth in Section 19 (Limited Warranty) of the Agreement, NWEA shall maintain the necessary and appropriate privacy and data security controls to secure Student Education Records. NWEA has and shall maintain commercially reasonable policies and procedures and trains appropriate staff members to secure and maintain the confidentiality of Student Education Records. NWEA has and shall maintain an incident response program that specifies the actions to be taken when NWEA detects a Security Breach. In accordance with applicable state law, NWEA shall notify Subscriber in writing, without unreasonable delay, if NWEA reasonably suspects that there has been a Security Breach, and that the Security Breach has exposed Subscriber’s Student Education Records to a third party. In the event of a Security Breach, Subscriber shall cooperate fully with NWEA so that NWEA can comply with its notification obligations to the affected parent(s), legal guardian(s) or eligible student(s) or any other parties for which notification by NWEA is required under applicable state law.
