Common use of Security Incident Notification Clause in Contracts

Security Incident Notification. Khan Academy's incident response procedures include procedures to provide prompt notification regarding security incidents as required by applicable laws, including a description of the security incident based on available information, and contact information for the Khan Academy representative(s) who will be available to assist the School District. To the extent that the incident triggers third party notice requirements under applicable laws, Khan Academy will either provide direct notification to affected persons or assist the School District in providing such notifications to affected School users. Nothing in the Agreement restricts Khan Academy's ability to provide separate breach notifications to its customers, including parents and other individuals with Website accounts. Physical security. Access to Khan Academy’s headquarters office is restricted to authorized personnel and visitors. All external entrances are locked and require badge access. Visitors must check in at the front desk, sign in using an electronic sign-in system, wear a visitor badge and be accompanied by their host during the visit. Rights to Challenge Accuracy of Information Held Supplemental information for Parents is included in Exhibit 2. The supplemental information includes information regarding how a Parent may challenge the accuracy of Student data that is collected by Khan Academy. A Parent, Student, eligible student, teacher or principal may challenge the accuracy of the student data that is collected by Khan Academy by notice to Khan Academy (choose “Report a problem” in Khan Academy’s Help Center) or send an email to xxxxxxx@xxxxxxxxxxx.xxx. Teachers or principals may also submit notices to xxxxxxxxxxxxxxxxxx@xxxxxxxxxxx.xxx. In the event that Khan Academy refers a Parent, Student or Eligible student request to review or correct education records to the School District, the School District will follow the necessary and proper procedures under the Family Educational Rights and Privacy Act (FERPA) and New York Education Law §2-d. The School District will provide Khan Academy with the name and contact information (including email) of the School District 's representative that will be responsible for responding to any such request. Khan Academy will respond in a reasonably timely manner to the School District's request for assistance with any request to view or correct Student data held by Khan Academy, consistent with the functionality of the Services. Deletion or transfer upon termination of accounts Services will be provided until either party terminates the Service. School Personnel may terminate the Services individually and/or with respect to School Accounts created by such School Personnel by contacting Khan Academy at xxxxxxxxxxxxxxxxxx@xxxxxxxxxxx.xxx. Khan Academy will dispose of Student accounts and Personally identifiable information contained in Student accounts within a reasonable time period following a written request from the School District, as described below, subject to Khan Academy’s ability to retain data in a personal account (described in Exhibit 2 - Transfer or Disposal of Data). If no written request or termination notice is received, Khan Academy accounts will remain open and available for use by the School District and/or account holder. Individual user accounts may be deleted by the account holder or, in the case of a Child User, by the Parent, using the account management features in the account settings. Khan Academy may also dispose of accounts or Personally identifiable information contained in accounts (a) when no longer needed for the purpose for which it was obtained, (b) upon request of a Parent or Student or (c) as required by applicable law.