Laserfiche WebLink
3. Da to Privacy <br />3.1 Use of District Data. Contractor shall use District Data only for the purpose of performing the <br />Services and fulfilling its duties under the Contract. <br />3.2 Prohibited Uses of District Data. With the exception of De -identified Data that the District has <br />agreed in writing to allow Contractor to use as specified in Section 3.5, Contractor shall not: <br />3.2.I Use, sell, rent, transfer, distribute, alter, Mine, or disclose District Data (including metadata) <br />to any third party without the prior written consent of the District, except as required by law; <br />3.2.2 Use District Data for its own commercial benefit, including but not limited to, advertising or <br />marketing of any kind directed toward children, parents, guardians, or District employees, unless such use is <br />specifically authorized by this Agreement or otherwise authorized in writing by the District; <br />3.2.3 Use District Data in a manner that is inconsistent with Contractor's privacy policy; <br />3.2.4 Use District Data to create a Student Profile other than as authorized or required by die <br />Contract to perform the Services; and <br />3.2.5 Store District Data outside the continental United States unless Contractor has given the District <br />Designated Representative advance written notice of where and how the servers are housed, managed, and <br />secured, and that the security standards required herein can be achieved. <br />3.3 4ualified FERPA Exception. If Contractor will have access to Education Records, Contractor <br />acknowledges that, for the purposes of this Agreement, pursuant to tine Family Educational Rights and Privacy Act, 20 <br />U.S.C. § 1232g and its implementing regulations, 34 C.F.R. Part 99 ("FERPA"), it will be designated as a "school <br />official" with "legitimate educational interests" in the District Education Records and PH disclosed pursuant to the Contract, <br />and Contractor agrees to abide by the FERPA limitations and requirements imposed on school officials. Contractor will <br />use the Education Records only for the purpose of fulfilling its duties under the Contract for District's and its End Users' <br />benefit, and shall not share District Data with or disclose it to any third party except as provided for in the Agreement, as <br />required by law, or if authorized in writing by the District. Contractor warrants and represents that during the five-year period <br />preceding the Effective Date of this Agreement, it has not been found in violation of FERPA by the Family Policy Compliance <br />Office. <br />3.4 Subcontractor Use of District Data. To the extent necessary to perform its obligations specified in the <br />Contract, Contractor may disclose District Data to Subcontractors pursuant to a written agreement, specifying the purpose <br />of the disclosure and providing that: (a) Subcontractor shall not disclose District Data, in whole or in part, to any other <br />party; (b) Subcontractor shall not use any District Data to advertise or market to students or their parents/guardians; (c) <br />Subcontractor shall access, view, collect, generate and use District Data only to tine extent necessary to assist Contractor <br />in performing its obligations specified in the Contract; (d) at the conclusion of its/their work under its/their subcontract(s) <br />Subcontractor shall, as directed by the District through Contractor, Securely Destroy all District Data in its/their <br />possession, custody or control, or return such District Data to the District, at the election of the District; (e) Subcontractor <br />shall indemnify the District in accordance with the terms set forth in Section 10 herein below, and (f) Subcontractor <br />shall utilize appropriate administrative, physical and technical safeguards in accordance with industry standards and best <br />practices to secure District Data from unauthorized <br />3 <br />Colorado Council of School Board Attorneys, December 10, 2016 <br />