Common use of Vendor’s Data Privacy and Security Plan Clause in Contracts

Vendor’s Data Privacy and Security Plan. i. Vendor will implement all state, federal, and local data privacy and security requirements and such requirements contained within the Master Agreement and these Terms and Conditions including but not limited to the requirements set forth in the Parents’ Xxxx of Rights and the Supplemental Information set forth below, consistent with the District’s data privacy and security policy. ii. Vendor will have specific administrative, operational and technical safeguards and practices in place to protect Protected Data that it receives from the District under the Master Agreement. iii. Vendor has provided or will provide training on the federal and state laws governing confidentiality of Protected Data for any of its officers or employees or assignees, if applicable, who will have access to Protected Data, prior to receiving access. iv. If Vendor uses any subcontractor(s), Vendor will require such subcontractor(s) or other authorized persons or entities to whom it may disclose Protected Data to execute written agreements acknowledging that the data protection obligations imposed on Vendor by state and federal law, the Master Agreement, and these Terms and Conditions shall apply to the subcontractor. v. Vendor will follow certain procedures for the return, transition, deletion, and/or destruction of Protected Data upon termination, expiration or assignment (to the extent authorized) of the Master Agreement as set forth in detail in the Supplemental Information below. vi. Vendor will manage data privacy and security incidents that implicate Protected Data and will develop and implement plans to identify breaches or unauthorized disclosures. Vendor will provide prompt notification to the District of any breaches or unauthorized disclosures of Protected Data in accordance with the provisions of Section 3 herein.

Vendor’s Data Privacy and Security Plan. i. Vendor will implement all state, federal, and local data privacy and security requirements and such requirements contained within the Master Agreement and these Terms and Conditions including but not limited to the requirements set forth in the Parents’ Xxxx Bill of Rights and the Supplemental Information set forth below, consistent with the District’s data privacy and security policy. ii. Vendor will have specific administrative, operational and technical safeguards and practices in place to protect Protected Data that it receives from the District under the Master Agreement. iii. Vendor has provided or will provide training on the federal and state laws governing confidentiality of Protected Data for any of its officers or employees or assignees, if applicable, who will have access to Protected Data, prior to receiving access. iv. If Vendor uses any subcontractor(s), Vendor will require such subcontractor(s) or other authorized persons or entities to whom it may disclose Protected Data to execute written agreements acknowledging that the data protection obligations imposed on Vendor by state and federal law, the Master Agreement, and these Terms and Conditions shall apply to the subcontractor. v. Vendor will follow certain procedures for the return, transition, deletion, and/or destruction of Protected Data upon termination, expiration or assignment (to the extent authorized) of the Master Agreement as set forth in detail in the Supplemental Information below. vi. Vendor will manage data privacy and security incidents that implicate Protected Data and will develop and implement plans to identify breaches or unauthorized disclosures. Vendor will provide prompt notification to the District of any breaches or unauthorized disclosures of Protected Data in accordance with the provisions of Section 3 herein.