Common use of Termination or Expiration of Contract and/or Agreement Clause in Contracts

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Vendor/Contractor shall return or destroy all confidential information information/Protected Data/Educational Records obtained in connection with the services provided therein and/or student datato the District. Destruction of the confidential information and/or student data information/Protected Data/Educational Records shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School the District, Vendor Vendor/Contractor will assist Hinsdale Central School the District in exporting all Protected Data previously received back to Hinsdale Central School the District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School the District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School the District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor Vendor/Contractor, any of its subcontractors or other authorized persons or entities to whom it Vendor/Contractor has disclosed Protected Data will to, shall not retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or Vendor/Contractor, any of its subcontractors or other authorized persons or entities to whom it Vendor/Contractor has disclosed Protected Data, as applicableData to, will provide Hinsdale Central School the District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCRCS, Vendor will assist Hinsdale Central School District CRCS in exporting all Protected Data previously received back to Hinsdale Central School District CRCS for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCRCS. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CRCS as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CRCS with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CRCS is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CRCS informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District in writing to CRCS Data Privacy Officer, 0000 Xxxxx 000, Xxxx, Xxx Xxxx Xx00000. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be usedxxxx://xxx.xxxxx.xxx/data-privacy-security/report-improper-disclosure. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the ofthe Agreement. b. If requested by Hinsdale Central School DistrictFillmore CSD, Vendor will assist Hinsdale Central School District Fillmore CSD in exporting all Protected Data previously received back to Hinsdale Central School District Fillmore CSD for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictFillmore CSD. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District Fillmore CSD as necessary to transition Protected Data to the tothe successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District Fillmore CSD with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant Fillmore CSD is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary Fillmore CSD informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 in writing to Fillmore CSD Data Privacy Officer, 000 X. Xxxx Xx. , Xxxxxxxx, XX Xxx Xxxx 00000 xxx@xxxxxxxxxx.xxx OR or by using the form available at the following website: xxxxx://xxx.xxxxxxxxxxx.xxx/Page/2923. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx XxxxxxAlbany, XX 00000NY 12234 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. XxxxxxxxHinsdale, XX 00000 NY 14743 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 XxxxxxEB 152 Albany, XX 00000 NY 12234 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information Protected Data obtained in connection with the services Services provided therein and/or student datapursuant to the Contract. Destruction of the confidential information and/or student data Protected Data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved Vendor’s methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT, Vendor will assist Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT. c. In the event the Contract is assigned by Vendor to a successor Vendor (to the extent authorized by the Contract), the Vendor will reasonably cooperate with Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Xxxxxxx-Xxxxxxxx Central School District, Vendor will assist Hinsdale Xxxxxxx-Xxxxxxxx Central School District in exporting all Protected Data previously received back to Hinsdale Xxxxxxx-Xxxxxxxx Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Xxxxxxx-Xxxxxxxx Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Xxxxxxx-Xxxxxxxx Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Xxxxxxx-Xxxxxxxx Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT, Vendor will assist Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant BELFAST CENTRAL SCHOOL DISTRICT is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary BELFAST CENTRAL SCHOOL DISTRICT informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to BELFAST CENTRAL SCHOOL DISTRICT Data Privacy Officer, 0000 Xxxxxxxx Xxxx, Xxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york- state-education-law-2d/report-an-improper-disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.xxxx://xxx.xxxxx.xxx/data-privacy-security/report-improper-disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictXXXXXXX XXXXXXXX CENTRAL SCHOOL DISTRICT, Vendor will assist Hinsdale Central School District XXXXXXX XXXXXXXX CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District XXXXXXX XXXXXXXX CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictXXXXXXX XXXXXXXX CENTRAL SCHOOL DISTRICT. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District XXXXXXX XXXXXXXX CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District XXXXXXX XXXXXXXX CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. Commented [A1]: a. Upon termination of the Agreement, Vendor Socrative shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Socrative will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Socrative (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Socrative prior to deletion. d. Neither Vendor Socrative nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Socrative and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 00 Xxxxx Xxxxxxxx Xxxxxx, Xxxxxxxxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Pivot Interactives SBC shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Pivot Interactives SBC will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Pivot Interactives SBC (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Pivot Interactives SBC prior to deletion. d. Neither Vendor Pivot Interactives SBC nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-de- identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Pivot Interactives SBC and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 00 Xxxxx Xxxxxxxx Xxxxxx, Xxxxxxxxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT, Vendor will assist Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central The Enlarged City School DistrictDistrict of Middletown, Vendor will assist Hinsdale Central The Enlarged City School District of Middletown in exporting all Protected Data previously received back to Hinsdale Central The Enlarged City School District of Middletown for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central The Enlarged City School DistrictDistrict of Middletown. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central The Enlarged City School District of Middletown as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central The Enlarged City School District of Middletown with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Newsela shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Newsela will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Newsela (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Newsela prior to deletion. d. Neither Vendor Newsela nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Newsela and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 00 Xxxxx Xxxxxxxx Xxxxxx, Xxxxxxxxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. . • If requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT, Vendor will assist Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. BELFAST CENTRAL SCHOOL DISTRICT. • In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. . • Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-de- identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Agriculture Experience Tracker shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Agriculture Experience Tracker will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Agriculture Experience Tracker (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Agriculture Experience Tracker prior to deletion. d. Neither Vendor Agriculture Experience Tracker nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Agriculture Experience Tracker and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 00 Xxxxx Xxxxxxxx Xxxxxx, Xxxxxxxxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s 's personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s 's educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx XxxxxxAlbany, XX 00000NY 12234 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. XxxxxxxxHinsdale, XX 00000 NY 14743 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 XxxxxxEB 152 Albany, XX 00000 NY 12234 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the ofthe Agreement. b. If requested by Hinsdale Central School DistrictFillmore CSD, Vendor will assist Hinsdale Central School District Fillmore CSD in exporting all Protected Data previously received back to Hinsdale Central School District Fillmore CSD for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictFillmore CSD. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District Fillmore CSD as necessary to transition Protected Data to the tothe successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District Fillmore CSD with a certification from an appropriate officer that these requirements have been satisfied in fullinfull. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant Fillmore CSD is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary Fillmore CSD informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 in writing to Fillmore CSD Data Privacy Officer, 000 X. Xxxx Xx. , Xxxxxxxx, XX Xxx Xxxx 00000 xxx@xxxxxxxxxx.xxx OR or by using the form available at the following website: xxxxx://xxx.xxxxxxxxxxx.xxx/Page/2923. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of this Agreement and written request by the AgreementHinsdale Central School District at any point prior to data deletion, Vendor shall return or assist the Hinsdale Central School District in downloading names, responses, results and grades obtained by students in their assignments (“Student Gradebooks”). Thereafter, Vendor shall destroy all confidential information obtained in connection with the services provided therein and/or student data, upon written request by the Hinsdale Central School District. In the absence of a written request, Vendor shall destroy all confidential information and/or student data upon eighteen (18) months of end- user account inactivity. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the AgreementAgreement for as long as Vendor retains possession of confidential information and/or student data. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, Data on any storage medium whatsoever. Without prejudice to the foregoing, Vendor may keep data backups that are part of Vendor’s disaster recovery storage system, which may be retained for an additional term of thirteen (13) months after termination of the Contract, provided such backups remain inaccessible to the public and are unable to be used by the Vendor in the normal course of its business. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. c. Vendor may use De-identified Data for purposes of research, the improvement of Vendor’s products and services, and/or the development of new products and services. In no event shall Vendor or Subcontractors re-identify or attempt to re- identify any De-identified Data or use De-identified Data in combination with other data elements or De-identified Data in the possession of a third-party affiliate, thereby posing risks of re-identification. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412Xxxxxxx@xxxxx.xxx 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that ata is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Vendor/Contractor shall return or destroy all confidential information information/Protected Data/Educational Records obtained in connection with the services provided therein and/or student datato the District. Destruction of the confidential information and/or student data information/Protected Data/Educational Records shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School the District, Vendor Vendor/Contractor will assist Hinsdale Central School the District in exporting all Protected Data previously received back to Hinsdale Central School the District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School the District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School the District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor Vendor/Contractor, any of its subcontractors or other authorized persons or entities to whom it Vendor/Contractor has disclosed Protected Data will to, shall not retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-de- identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or Vendor/Contractor, any of its subcontractors or other authorized persons or entities to whom it Vendor/Contractor has disclosed Protected Data, as applicableData to, will provide Hinsdale Central School the District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Peardeck shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Peardeck will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Peardeck (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Peardeck prior to deletion. d. Neither Vendor Peardeck nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or Peardeck and/ or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy-security/ student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 0000 Xxxxxxxx Xxxx, Xxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/ resources/new-york-state-education-law-2d/report-an-improper-disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy-security/report- improper-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student datadata pursuant to Section 5(e) of this Agreement. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCRCS, Vendor will assist Hinsdale Central School District CRCS in exporting all Protected Data previously received back to Hinsdale Central School District CRCS for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCRCS. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CRCS as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoeverwhatsoever pursuant to section 5(e) of this Agreement. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CRCS with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR VENDOR INFORMATION REGARDING DATA PRIVACY AND SECURITY Pursuant Vendor: BrainPOP LLC Product: BrainPOP Collects: ☒ Student Data ☒ Teacher or Principal Data ☐ Does not collect either Educational agencies including Cattaraugus-Allegany-Erie-Wyoming BOCES are required to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable post information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student datacontracts on the agency’s website with the Parents Xxxx of Rights. To that end, or teacher or principal data will include please complete the table below with information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection relevant to NYS Education Law 2- d and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration Part 121.3 of the agreementCommissioner’s Regulations. Note that this applies to all software applications and to mobile applications (“apps”). d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the AgreementAgreement and receipt of written request by the District, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data, except for backup data as described above. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, Data on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Gimkit shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Gimkit will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Gimkit (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Gimkit prior to deletion. d. Neither Vendor Gimkit nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Gimkit and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website h ttp://www.nysed.go v/data-privacy- s ecurity/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 0000 Xxxxxxxx Xxxx, Xxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR h ttps:/ /cab oces .org/ res ou rces/ new -york-s ta te-edu ca tion-law -2d/ rep ort-a n-imp xxxxx- d isclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000h ttp://www.nysed.go v/data-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdprivacy- security/report-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the thirdimproper-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictGENESEE VALLEY CENTRAL SCHOOL DISTRICT and to the reasonable extent possible, Vendor will assist Hinsdale Central School District GENESEE VALLEY CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District GENESEE VALLEY CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District GENESEE VALLEY CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District GENESEE VALLEY CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant GENESEE VALLEY CENTRAL SCHOOL DISTRICT is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary GENESEE VALLEY CENTRAL SCHOOL DISTRICT informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to GENESEE VALLEY CENTRAL SCHOOL DISTRICT Data Privacy Officer, 0 Xxxxxx Xxxxx, Xxxxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xxxxxxx://xxx.xxxxxxxxx.xxx/privacy. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx XxxxxxAlbany, XX 00000NY 12234 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. XxxxxxxxHinsdale, XX 00000 NY 14743 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 XxxxxxAlbany, XX 00000 NY 12234 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the ofthe Agreement. b. If requested by Hinsdale Central School DistrictFillmore CSD, Vendor will assist Hinsdale Central School District Fillmore CSD in exporting all Protected Data previously received back to Hinsdale Central School District Fillmore CSD for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictFillmore CSD. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District Fillmore CSD as necessary to transition Protected Data to the tothe successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District Fillmore CSD with a certification from an appropriate officer that these requirements have been satisfied in fullinfull. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant Fillmore CSD is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary Fillmore CSD informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 in writing to Fillmore CSD Data Privacy Officer, 000 X. Xxxx Xx. , Xxxxxxxx, XX Xxx Xxxx 00000 xxx@xxxxxxxxxx.xxx OR or by using the form available at the following website: xxxxx://xxx.xxxxxxxxxxx.xxx/Page/2923. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure Xxxxx Xxx

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, upon written request, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested in writing by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT, Vendor will assist Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT in exporting all Protected Data previously received back to Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictBELFAST CENTRAL SCHOOL DISTRICT. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon written request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District BELFAST CENTRAL SCHOOL DISTRICT with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor American Reading Company will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor American Reading Company (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor American Reading Company prior to deletion. d. Neither Vendor American Reading Company nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor American Reading Company and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 00 Xxxxx Xxxxxxxx Xxxxxx, Xxxxxxxxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Kodable shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Kodable will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Kodable (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Kodable prior to deletion. d. Neither Vendor Kodable nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Kodable and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 0000 Xxxxxxxx Xxxx, Xxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor Clever Prototypes, LLC shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL, Vendor Clever Prototypes, LLC will assist Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL in exporting all Protected Data previously received back to Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School DistrictCATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL. c. In the event the Contract is assigned to a successor Vendor Clever Prototypes, LLC (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL as necessary to transition Protected Data to the successor Vendor Clever Prototypes, LLC prior to deletion. d. Neither Vendor Clever Prototypes, LLC nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-de- identified Protected Data, on any storage medium whatsoever. Upon request, Vendor Clever Prototypes, LLC and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed toin writing to CATTARAUGUS LITTLE VALLEY CENTRAL SCHOOL Data Privacy Officer, 0000 Xxxxxxxx Xxxx, Xxxxx, Xxx Xxxx 00000 or by using the form available at the following website: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR xxxxx://xxxxxxx.xxx/resources/new-york-state-education-law-2d/report-an-improper- disclosure/. Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000xxxx://xxx.xxxxx.xxx/data-privacy- security/report-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a thirdimproper-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.disclosure

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the AgreementAgreement and within sixty (60) days, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School DistrictCRCS, Vendor will assist Hinsdale Central School District CRCS in exporting all Protected Data previously received back to Hinsdale Central School District CRCS for its own use, prior to deletiontermination, in such formats as may be requested by Hinsdale Central School DistrictCRCS. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District CRCS as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, Data on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District CRCS with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant CRCS is committed to protecting the privacy and security of student data and teacher and principal data. In accordance with New York State Education Law Section 2-dd and its implementing regulations, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary CRCS informs the school community of such rights.the following: 1. A student’s 's personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District's education record. 3. State and Federal Laws federal laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, including but not limited to, to encryption, firewalls, and password protection protection, must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for public review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx The list may also be made available website xxxx://xxx.xxxxx.xxx/data-privacy- security/student-data-inventory or by writing to: to the Office of Information & and Reporting Services Services, New York State Education Department Department, Room 863 865 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX Xxxxxx, Xxx Xxxx 00000. 5. Parents have the right to have submit complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District in writing to CRCS Data Privacy Officer, 0000 Xxxxx 000, Xxxx, Xxx Xxxx Xx00000. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Complaints may also be directed in writing to Chief Privacy Officer Officer, New York State Education Department Department, 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX Xxx Xxxx 00000 Phoneor by using the form available at the following website: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be usedxxxx://xxx.xxxxx.xxx/data-privacy-security/report-improper-disclosure. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.

Termination or Expiration of Contract and/or Agreement. a. Upon termination of the Agreement, Vendor shall return or destroy all confidential information obtained in connection with the services provided therein and/or student data. Destruction of the confidential information and/or student data shall be accomplished utilizing an approved method of confidential destruction, including, shredding, burning or certified/witnessed destruction of physical materials and verified erasure of magnetic media using approved methods of electronic file destruction. The parties further agree that the terms and conditions set forth herein shall survive the expiration and/or termination of the Agreement. b. If requested by Hinsdale Central School District, Vendor will assist Hinsdale Central School District in exporting all Protected Data previously received back to Hinsdale Central School District for its own use, prior to deletion, in such formats as may be requested by Hinsdale Central School District. c. In the event the Contract is assigned to a successor Vendor (to the extent authorized by the Contract), the Vendor will cooperate with Hinsdale Central School District as necessary to transition Protected Data to the successor Vendor prior to deletion. d. Neither Vendor nor any of its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data will retain any Protected Data, copies, summaries or extracts of the Protected Data, or any de-identified Protected Data, on any storage medium whatsoever. Upon request, Vendor and/or its subcontractors or other authorized persons or entities to whom it has disclosed Protected Data, as applicable, will provide Hinsdale Central School District with a certification from an appropriate officer that these requirements have been satisfied in full. PARENTS’ XXXX OF RIGHTS FOR DATA PRIVACY AND SECURITY Pursuant to New York State Education Law 2-d, Parents, Legal Guardians and persons in parental relation to a student are entitled to certain rights with regard to their child’s personally identifiable information, as defined by Education Law 2-d. This document contains a plain-English summary of such rights. 1. A student’s personally identifiable information cannot be sold or released for any commercial purposes. 2. Parents have the right to inspect and review the complete contents of their child’s educational records maintained by the Hinsdale Central School District. 3. State and Federal Laws protect the confidentiality of personally identifiable student information, and safeguards associated with industry standards and best practices, including, but not limited to, encryption, firewalls, and password protection must be in place when data is stored or transferred. 4. A complete list of all student data elements collected by New York State is available for review at the following website: xxxx://xxx.x00.xxxxx.xxx/irs/sirs/documentation/NYSEDstudentData.xlsx h ttp://xxx.x00.xxxxx.xxx/xxx/xxxx/xxxxxxxxxxxxx/XXXXXxxxxxxxXxxx.xxxx The list may also be made available by writing to: Office of Information & Reporting Services New York State Education Department Room 863 EBA, 00 Xxxxxxxxxx Xxxxxx Xxxxxx, XX 00000 5. Parents have the right to have complaints about possible breaches of student data addressed. Complaints should be directed to: Hinsdale School District 0000 Xxxx Xx. Xxxxxxxx, XX 00000 xxx@xxxxxxxxxx.xxx OR Chief Privacy Officer New York State Education Department 00 Xxxxxxxxxx Xxxxxx, XX 000 Xxxxxx, XX 00000 Phone: (000) 000-0000 Email: Xxxxxxx@xxxxx.xxx 204412 6. Each contract with a third-party contractor which will receive student data, or teacher or principal data will include information addressing the following: a. The exclusive purposes for which the student data or teacher or principal data will be used. b. How the third-party contractor will ensure that the subcontractors, persons or entities that the third-party contractor will share the student data or teacher or principal data with, if any, will abide by data protection and security requirements. c. When the agreement expires and what happens to the student data or teacher and principal data upon expiration of the agreement. d. If and how a parent, student, a student over eighteen years of age, teacher or principal may challenge the accuracy of the student data or teacher or principal data that is collected; and e. Where the student data or teacher or principal data will be stored, and the security protections taken to ensure such data will be protected, including whether such data will be encrypted.