Protection of Personally Identifiable Information. Care Solace does not own any of the student data or District-created data within its products. The data disclosed by the District, including Student PII within the products are property of, and under the control of the District, except for such data or Student PII that Care Solace receives directly from a student and/or student’s family. Care Solace cannot disclose any personally identifiable information (PII) from any of Care Solace software applications, except as otherwise permitted by this Agreement or as authorized in writing by a parent, guardian, or “eligible student” (as defined by XXXXX). Students who wish to retain possession and control their own data content should contact the District. If the District is unable to fulfill the request of the student, Care Solace shall provide reasonable assistance at the direction of the District and at no expense. Each Party agrees that it will use PII from education records only to meet the purpose or purposes of the Agreement. Under no circumstances will PII be shared with entities outside of the District, except as otherwise permitted by this Agreement, unless the requesting agency is the original custodian of said data, there is an applicable exception, and/or consent to release data is provided by the parent or student. In addition, students thirteen (13) and under are permitted to use this product through students’ accounts, with parental consent/authorization. All PII will be physically and virtually protected from breaches by way of physically securing the servers on which the data resides and utilizing technologies such as encryption and firewalls. Data will be encrypted in transmission and in storage using SSL (Secure Sockets Layer) and stored at no less than 128-bit level encryption. Each Party will perform internal privacy audits and maintain compliance with all federal and state regulations regarding privacy, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), The Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act ("COPPA"), and Nevada Revised Statute 392.029, as applicable to such party. Each Party shall not use the shared data in any manner not permitted by appropriate governing federal and state regulations. Access to the information received by the District pursuant to this Agreement shall be limited to those with a need to access it for the specific purposes detailed in this Agreement. Each Party agrees to fully and promptly report to the providing Party any infraction or violation of the confidentiality or security requirements set forth in this Agreement and agrees to adopt appropriate corrective measures, which may include but is not limited to appropriate disciplinary action, to prevent any further infractions or violations. When contracting with Care Solace for educational purposes, the District may act as the parent’s agent and can consent to the collection of students PII on the parent’s behalf. Care Solace is further required to provide all parental notification requirements under applicable law, including publicly posting its privacy policy that includes descriptions of what information is collected from students, how that information may be used and disclosed, and contact information for any third parties that may also be collecting information through the site.
Appears in 1 contract
Samples: Service Agreement
Protection of Personally Identifiable Information. Care Solace Prisms does not own any of the student data or District-created data within its products. The data disclosed by the District, including Student PII within the products are property of, and under the control of the District, except for such data or Student PII that Care Solace receives directly from a student and/or student’s family. Care Solace Prisms cannot disclose any personally identifiable information (PII) from any of Care Solace Prisms software applications, except as otherwise permitted by this Agreement or as authorized in writing by a parent, guardian, or “eligible student” (as defined by XXXXX)Agreement. Students who wish to retain possession and control their own data content should contact the District. If the District is unable to fulfill the request of the student, Care Solace Prisms shall provide reasonable assistance at the direction of the District and at no expense. Each Party agrees that it will use PII from education records only to meet the purpose or purposes of the Agreement. Under no circumstances will PII be shared with entities outside of the District, except as otherwise permitted by this Agreement, unless the requesting agency is the original custodian of said data, there is an applicable exception, and/or consent to release data is provided by the parent or student. In addition, students thirteen (13) and under are permitted to use this product through students’ accounts, with parental consent/authorization. All PII will be physically and virtually protected from breaches by way of physically securing the servers on which the data resides and utilizing technologies such as encryption and firewalls. Data will be encrypted in transmission and in storage using SSL (Secure Sockets Layer) and stored at no less than 128-bit level encryption. Each Party will perform internal privacy audits and maintain compliance with all federal and state regulations regarding privacy, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), The Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act ("COPPA"), and Nevada Revised Statute 392.029, as applicable to such party. Each Party shall not use the shared data in any manner not permitted by appropriate governing federal and state regulations. Access to the information received by the District pursuant to this Agreement shall be limited to those with a need to access it for the specific purposes detailed in this Agreement. Each Party agrees to fully and promptly report to the providing Party any infraction or violation of the confidentiality or security requirements set forth in this Agreement and agrees to adopt appropriate corrective measures, which may include but is not limited to appropriate disciplinary action, to prevent any further infractions or violations. When contracting with Care Solace Prisms for educational purposes, the District may act as the parent’s agent and can consent to the collection of students PII on the parent’s behalf. Care Solace Prisms is further required to provide all parental notification requirements under applicable law, including publicly posting its privacy policy that includes descriptions of what information is collected from students, how that information may be used and disclosed, and contact information for any third parties that may also be collecting information through the site.
Appears in 1 contract
Samples: Service Agreement
Protection of Personally Identifiable Information. Care Solace PowerSchool does not own any of the student data or District-created data within its products. The data disclosed by the District, including Student PII within the products are property of, and under the control of the District, except for such data or Student PII that Care Solace receives directly from a student and/or student’s family. Care Solace PowerSchool cannot disclose any personally identifiable information (PII) from any of Care Solace PowerSchool software applications, except as otherwise permitted by this Agreement or as authorized in writing by a parent, guardian, or “eligible student” (as defined by XXXXX). Students who wish to retain possession and control their own data content should contact the District. If the District is unable to fulfill the request of the student, Care Solace PowerSchool shall provide reasonable assistance assist at the direction of the District and at no expense. Each Party agrees that it will use PII from education records only to meet the purpose or purposes of the Agreement. Under no circumstances will PII be shared with entities outside of the District, except as otherwise permitted by this Agreement, District unless the requesting agency is the original custodian of said data, there is an applicable exception, and/or consent to release data is provided by the parent or student. In addition, students thirteen (13) and under are permitted to use this product through students’ accounts, with parental consent/authorization. All PII will be physically and virtually protected from breaches by way of physically securing the servers on which the data resides and utilizing technologies such as encryption and firewalls. Data will be encrypted in transmission and in storage using SSL (Secure Sockets Layer) and stored at no less than 128-bit level encryption. Each Party will perform internal privacy audits and maintain compliance with all federal and state regulations regarding privacy, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), The Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act ("COPPA"), and Nevada Revised Statute 392.029, as applicable to such party. Each Party shall not use the shared data in any manner not permitted by appropriate governing federal and state regulations. Access to the information received by the District pursuant to this Agreement shall be limited to those with a need to access it for the specific purposes detailed in this Agreement. Each Party agrees to fully and promptly report to the providing Party any infraction or violation of the confidentiality or security requirements set forth in this Agreement and agrees to adopt appropriate corrective measures, which may include but is not limited to take appropriate disciplinary action, action against anyone found to prevent any further infractions have violated the terms of this Agreement or violationsapplicable federal or state law. When contracting with Care Solace for PowerSchool educational purposes, the District may act as the parent’s agent and can consent to the collection of students PII on the parent’s behalf. Care Solace PowerSchool is further required to provide all parental notification requirements under applicable law, including publicly posting its privacy policy that includes descriptions of what information is collected from students, how that information may be used and disclosed, and contact information for any third parties that may also be collecting information through the site.
Appears in 1 contract
Samples: Powerschool Agreement
Protection of Personally Identifiable Information. Care Solace GOALBOOK does not own any of the student data or District-created data within its products. The data disclosed by the District, including Student PII within the products are property of, and under the control of the District, except for such data or Student PII that Care Solace receives directly from a student and/or student’s family. Care Solace GOALBOOK cannot disclose any personally identifiable information (PII) from any of Care Solace GOALBOOK software applications, except as otherwise permitted by this Agreement or as authorized in writing by a parent, guardian, or “eligible student” (as defined by XXXXX)Agreement. Students who wish to retain possession and control their own data content should contact the District. If the District is unable to fulfill the request of the student, Care Solace GOALBOOK shall provide reasonable assistance at the direction of the District and at no expense. Each Party agrees that it will use PII from education records only to meet the purpose or purposes of the Agreement. Under no circumstances will PII be shared with entities outside of the District, except as otherwise permitted by this Agreement, unless the requesting agency is the original custodian of said data, there is an applicable exception, and/or consent to release data is provided by the parent or student. In addition, students thirteen (13) and under are permitted to use this product through students’ accounts, with parental consent/authorization. All PII will be physically and virtually protected from breaches by way of physically securing the servers on which the data resides and utilizing technologies such as encryption and firewalls. Data will be encrypted in transmission and in storage using SSL (Secure Sockets Layer) and stored at no less than 128-bit level encryptionencryption . Each Party will perform internal privacy audits and maintain compliance with all federal and state regulations regarding privacy, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), The Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act ("COPPA"), and Nevada Revised Statute 392.029, as applicable to such party. Each Party shall not use the shared data in any manner not permitted by appropriate governing federal and state regulations. Access to the information received by the District pursuant to this Agreement shall be limited to those with a need to access it for the specific purposes detailed in this Agreement. Each Party agrees to fully and promptly report to the providing Party any infraction or violation of the confidentiality or security requirements set forth in this Agreement and agrees to adopt appropriate corrective measures, which may include but is not limited to appropriate disciplinary action, to prevent any further infractions or violations. When contracting with Care Solace GOALBOOK for educational purposes, the District may act as the parent’s agent and can consent to the collection of students PII on the parent’s behalf. Care Solace GOALBOOK is further required to provide all parental notification requirements under applicable law, including publicly posting its privacy policy that includes descriptions of what information is collected from students, how that information may be used and disclosed, and contact information for any third parties that may also be collecting information through the site.
Appears in 1 contract
Samples: Student Data Privacy Agreement