Common use of Disposition of Data Clause in Contracts

Disposition of Data. Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provider. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) days. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. To the extent feasible, Provider shall dispose or delete all personally identifiable data obtained under Student Data and Teacher Data stored by Provider pursuant to the DPA Underlying Agreement when it is no longer needed for the purpose for which it was obtained obtained, and transfer/migrate transfer said data in a standard data format to LEA or LEA’s designee within sixty (60) days of on the date of termination and of the Underlying Agreement according to a schedule and procedure as the Parties may reasonably agree in agree. Upon a readable and usable format. This copy written request of all the LEA, except for backups, the Provider will dispose or delete Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Teacher Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Providerwithin sixty days. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition, except for backups as outlined below. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Student Data and Teacher Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data and Teacher Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. All backups will be deleted within one year. Backups will receive the same protections as all other Student Data under this DPA and the LEA may request in writing at any time the status of backups. The LEA may request within one year of termination of this DPA, the status of a backup and may request deletion of any restored LEA data. The LEA may employ a “Request Directive for Return or Deletion Disposition of Student Data” FORMform, A Copy a copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data or Teacher Data in a standard file format within three ten (310) calendar business days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. To the extent feasible, Provider shall dispose or delete all personally identifiable data obtained under Student Data and Teacher Data stored by Provider pursuant to the DPA Underlying Agreement when it is no longer needed for the purpose for which it was obtained obtained, and transfer/migrate transfer said data in a standard data format to LEA or LEAXXX’s designee within sixty (60) days of on the date of termination and of the Underlying Agreement according to a schedule and procedure as the Parties may reasonably agree in agree. Upon a readable and usable format. This copy written request of all the LEA, except for backups, the Provider will dispose or delete Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Teacher Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Providerwithin sixty days. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition, except for backups as outlined below. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Student Data and Teacher Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data and Teacher Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. All backups will be deleted within one year. Backups will receive the same protections as all other Student Data under this DPA and the LEA may request in writing at any time the status of backups. The LEA may request within one year of termination of this DPA, the status of a backup and may request deletion of any restored LEA data. The LEA may employ a “Request Directive for Return or Deletion Disposition of Student Data” FORMform, A Copy a copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data or Teacher Data in a standard file format within three ten (310) calendar business days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. To the extent feasible, Provider shall dispose or delete all personally identifiable data obtained under Student Data and Teacher Data stored by Provider pursuant to the DPA Underlying Agreement when it is no longer needed for the purpose for which it was obtained and transfer/migrate transfer said data in a standard data format to LEA or LEA’s designee within sixty (60) days of on the date of termination and of the Underlying Agreement according to a schedule and procedure as the Parties may reasonably agree in agree. Upon a readable and usable format. This copy written request of all the LEA, except for backups, the Provider will dispose or delete Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Teacher Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Providerwithin sixty days. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition, except for backups as outlined below. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Student Data and Teacher Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data and Teacher Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. All backups will be deleted within one year. Backups will receive the same protections as all other Student Data under this DPA and the LEA may request in writing at any time the status of backups. The LEA may request within one year of termination this DPA, the status of a backup and may request deletion of any restored LEA data. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data or Teacher Data in a standard file format within three ten (310) calendar business days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. In accordance with the applicable terms in subsection (a) or (b) below, and upon a written request from the LEA, Provider shall dispose or delete all personally identifiable data obtained Student Data and Teacher Data under the DPA within thirty (30) days of the date of receipt of such written request. If no written request is received, Provider shall dispose or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60b) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held required by subprocessors or agents of the Providerapplicable law. Nothing in the DPA authorizes Provider to maintain personally identifiable data PII or Teacher Data obtained under any other writing beyond the time period reasonably needed to complete the dispositiondisposition unless a student, parent or legal guardian of a student chooses to establish a separate contractual relationship with the Provider and provides written consent for the transfer of the Student Data. Disposition shall include (1) the shredding of any hard copies of any Pupil RecordsStudent Data and Teacher Data; (2) ErasingErasing any Personally Identifiable Information; or (3) Otherwise modifying the personal information Personally Identifiable Information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Student Data and Teacher Data has been disposed within ninety (90) daysdisposed. The duty to dispose Upon receipt of a request from the LEA, the Provider will also immediately provide the LEA with any specified portion of the Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms Teacher Data within ten (10) calendar days of the DPAreceipt of said request. The LEA may also employ a “Request for Return or Deletion of Student Data” FORM, A a Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from ) for the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said written request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Upon request, Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and obtained, or transfer/migrate said data to LEA or LEA’s designee designee, within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provider. Nothing in the this DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Upon request, Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) days. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORMform, A Copy a copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three ten (310) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Upon a written request by LEA, Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate transfer said data to LEA or LEA’s designee within sixty (60) days of the date of termination such written request and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provideragree. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three ten (310) calendar days of receipt of said request. The Provider shall ensure Commented [A1]: Note to all LEAs: There is a function within PandaDoc to turn off our automatic message that such transfer/migration uses facilities and methods is generated that says “Enjoy using PandaDoc? Click here to learn more”. This can be turned off by each LEA when their accounts are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transitionset up.

Disposition of Data. Provider shall dispose or shall, at LEA’s request, delete all personally identifiable data Personally Identifiable Information contained in Student Data obtained under the DPA upon termination within thirty (30) days for the data and within sixty-five (65) day for any back-ups, according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60b) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held required by subprocessors or agents of the Providerapplicable law. Nothing in the DPA authorizes Provider to maintain personally identifiable data Personally Identifiable Information contained in Student Data obtained under any other writing beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider for the purpose of storing Pupil- Generated Content. Disposition shall include (1) the shredding of any hard copies of any Pupil RecordsPersonally Identifiable Information contained in Student Data; (2) Erasingerasing any Personally Identifiable Information contained in Student Data; or (3) Otherwise otherwise modifying the personal information Personally Identifiable Information in those records Student Data to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be nonindecipherable or De-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88Identified. Provider shall provide written notification to LEA when the Student Data has been disposed within ninety (90) dayspursuant to LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data Student Data that has been deDe-identified Identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEAXXX’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provider. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) days. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall dispose or shall, at LEA’s request, delete all personally identifiable Personally Identifiable Information contained in Student data obtained under the DPA upon termination within thirty (30) days for the data and within sixty-five (65) day for any back-ups, according to a schedule and procedure as the Parties may reasonably agree. If no written request is received, Provider shall dispose of or delete all Personally Identifiable Information contained in Student Data at the earliest of (a) when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60b) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held required by subprocessors or agents of the Providerapplicable law. Nothing in the DPA authorizes Provider to maintain personally identifiable data Personally Identifiable Information contained in Student Data obtained under any other writing beyond the time period reasonably needed to complete the disposition, unless a student, parent or legal guardian of a student chooses to establish and maintain a separate account with Provider for the purpose of storing Pupil- Generated Content. Disposition shall include (1) the shredding of any hard copies of any Pupil RecordsPersonally Identifiable Information contained in Student Data ; (2) Erasingerasing any Personally Identifiable Information contained in Student Data; or (3) Otherwise otherwise modifying the personal information Personally Identifiable Information in those records Student Data to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be nonindecipherable or De-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88Identified. Provider shall provide written notification to LEA when the Student Data has been disposed within ninety (90) dayspursuant to LEA’s request for deletion. The duty to dispose of Student Data shall not extend to data that has been deDe-identified Identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Except as otherwise provided herein, upon confirmed receipt of LEA’s written request by Provider’s Data Protection Officer, Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Provider will make reasonable efforts toward providing the Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provider. Nothing Except as otherwise provided herein, nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) days. The duty to dispose of Student Data shall not extend to data (a) for which Provider has specifically obtained consent from the parent, legal guardian or eligible student to keep, through an agreement directly between the Provider and the student who is over eighteen (18) and/or parent/legal guardian (such separate agreement does not impact the Provider’s obligations to maintain and process Student Data in accordance with this DPA),, (b) that has been de-identified identified, or (c) is placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall make reasonable efforts to ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provider. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) days. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three ten (310) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. To the extent feasible, Provider shall dispose or delete all personally identifiable data obtained under Student Data and Teacher Data stored by Provider pursuant to the DPA Underlying Agreement when it is no longer needed for the purpose for which it was obtained and transfer/migrate transfer said data in a standard data format to LEA or LEAXXX’s designee within sixty (60) days of on the date of termination and of the Underlying Agreement according to a schedule and procedure as the Parties may reasonably agree in agree. Upon a readable and usable format. This copy written request of all the LEA, except for backups, the Provider will dispose or delete Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Teacher Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Providerwithin sixty days. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition, except for backups as outlined below. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Student Data and Teacher Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data and Teacher Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. All backups will be deleted within one year. Backups will receive the same protections as all other Student Data under this DPA and the LEA may request in writing at any time the status of backups. The LEA may request within one year of termination this DPA, the status of a backup and may request deletion of any restored LEA data. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data or Teacher Data in a standard file format within three ten (310) calendar business days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate said data to LEA or LEA’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in a readable and usable format. This copy of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Provider. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) days. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three ten (310) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall dispose or delete all personally identifiable data obtained under the DPA when it is no longer needed for the purpose for which it was obtained and transfer/migrate transfer said data to LEA or LEA’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree in agree, provided that Provider may retain personally identifiable data for up to one year after the Agreement termination to provide LEA with access to LEA personally identifiable data within this period, if required. The data stored at the backups will be deleted within a readable year from the date of deletion of data from the production database. Only LEA has hard copies or printouts of the data used, and usable format. This copy thus, it is the responsibility of the LEA, and not the Provider to dispose of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionaryhard copies generated. The LEA also has the ability, mutually agreeable and sufficient at any time, to enable efficient transfer of the Student Data to a new system. It must include delete all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Providerdigitally stored data. Nothing in the DPA authorizes Provider to maintain personally identifiable data obtained under any other writing beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil Records; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended by NIST Special Publication 800-88. Provider shall provide written notification to LEA when the Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request for Return or Deletion of Student Data” FORM, A Copy of which is attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.

Disposition of Data. Provider shall dispose or delete all personally identifiable data Student Data obtained under the DPA Service Agreement when it is no longer needed for the purpose for which it was obtained obtained, and, where applicable and transfer/migrate upon written request by LEA, transfer said data to LEA or LEA’s designee within sixty (60) days of the date of termination and according to a schedule and procedure as the Parties may reasonably agree agree. LEA will have the ability to download names, responses, results and grades obtained by students in their assignments (“student gradebooks”), at any point prior to deletion. Return or transfer of data other than the names, responses, results and grades obtained by students in their assignments, to LEA, shall not apply if proven to be incompatible with the Service, technically impossible or to involve a disproportionate effort for Provider. In such events, and upon written request by the LEA, Provider shall proceed to deletion of Data in a readable and usable format. This copy manner consistent with the terms of all Student Data will be provided in a standard format with standard delimiters and a matching data dictionary, mutually agreeable and sufficient to enable efficient transfer of the Student Data to a new system. It must include all Student Data which may have been re-disclosed to or held by subprocessors or agents of the Providerthis DPA. Nothing in the DPA Service Agreement authorizes Provider to maintain personally identifiable data Student Data obtained under any other writing the Service Agreement beyond the time period reasonably needed to complete the disposition. Disposition shall include (1) the shredding of any hard copies of any Pupil RecordsStudent Data; (2) Erasing; or (3) Otherwise modifying the personal information in those records to make it unreadable or indecipherable. Permanent destruction of this Confidential Data must be non-recoverable and meet DoD standard 5220.22-M and processes recommended Provider shall, upon written request by NIST Special Publication 800-88. Provider shall LEA, provide written notification to LEA when the Student Data has been disposed within ninety (90) daysdisposed. The duty to dispose of Student Data shall not extend to data that has been de-identified or placed in a separate Student account, pursuant to the other terms of the DPA. The LEA may employ a “Request Directive for Return or Deletion Disposition of Student Data” FORM, A Copy of which is (attached hereto as Exhibit “D”). Upon receipt of a request from the LEA, the Provider will immediately provide the LEA with any specified portion of the Student Data within three (3) calendar days of receipt of said request. The Provider shall ensure that such transfer/migration uses facilities and methods that are compatible with the relevant systems of the LEA or its transferee, and to the extent technologically feasible, that the LEA will have reasonable access to Student Data during the transition.