Common use of Student Information Clause in Contracts

Student Information. In the course of providing services during the term of the contract, certain personnel of Consultant may have access to student education records that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Such information confidential and is therefore protected. To the extent that Consultant’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant agrees that it shall not use education records for any purpose other than in the performance of this contract. Except as required by law, Consultant shall not disclose or share education records with any third party unless permitted by the terms of the contract or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant under this contract. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to Consultant. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant shall not provide direct access to such data or information or respond to individual requests. Consultant shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or information. Should Consultant receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. If Consultant experiences a security breach concerning any education record covered by this contract, then Consultant will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation set forth in the contract may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant to receive any information from District for a period of not less than five (5) years. In addition, Consultant agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. Upon termination of Agreement, Consultant shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant shall not retain copies of any data or information received from the District once the District has directed Consultant as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices).

Student Information. In the course of providing services during the term of the contractLancaster-Lebanon IU13, in order to fulfill its responsibilities under this Agreement will have a legitimate educational interest in creating and reviewing certain personnel of Consultant may have access to student education records that are subject to personally identifiable information regarding students (“Student Information”). Lancaster-Lebanon IU13 shall be bound by the Family Educational Rights and Privacy Act (“FERPA”), 20 U.S.C. 1232gthe Protection of Pupil Rights Act (“PPRA”) and any other applicable federal, et seqstate and/or local statute or regulation regarding Student Information. and the regulations promulgated there under. Such information confidential and is therefore protected. To the extent that Consultant’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant Lancaster-Lebanon IU13 agrees that it shall not use education records Student Information solely for any the purpose other than of delivering educational services in accordance with the performance terms of this contractAgreement. Except as required by lawLancaster-Lebanon IU13 further agrees that Student Information in any manner whatsoever; provided, Consultant shall not disclose or share education records however, that any such information may be disclosed to Lancaster-Lebanon IU13’s employees and representatives who need to know such information for the sole purpose of delivery educational services in accordance with any third party unless permitted the terms of this Agreement and who are provided with a copy of this confidentiality provision of the contract and agree to be bound by the terms thereof to the extent as if they were parties hereto. In the event that Lancaster-Lebanon IU13 is requested or required (by oral questions, interrogatories, requests for information or documents in legal proceedings, subpoenas, civil investigative demands or other similar processes) to disclose any student information, Lancaster-Lebanon IU13 shall provide Manheim Township School District with prompt written notice of any such request or requirement so that Manheim Township School District may seek a protective order or other remedy. If, in the absence of a protective order, or other remedy, Lancaster-Lebanon IU13 is nonetheless legally compelled to disclose Student Information to any tribunal, regulatory authority, or agency, Lancaster-Lebanon IU13 may, without liability hereunder, disclose to such tribunal, regulatory authority, or agency only that portion of the contract or Student Information which it is legally required to subcontractors who have agreed be disclosed, provided that Lancaster-Lebanon IU13 exercises reasonable efforts to maintain preserve the confidentiality of the education records Student Information. Within one (1) year from the date that a student has completed services with Lancaster- Lebanon IU13, Lancaster-Lebanon IU13 shall return all Student Information to Manheim Township School District, no copies thereof shall be retained. The sole purpose for the same extent required retention of Consultant under this contractthe documents shall be to assist Lancaster-Lebanon IU13 and Manheim Township School District in defending any claim by the student and/or the student’s parents or natural guardians. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to Consultant. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant will immediately inform the District of such request Lancaster-Lebanon IU13 shall certify in writing if allowed by law or judicial and/or administrative order. Consultant shall not provide direct access to Manheim Township School District that such data or information or respond to individual requests. Consultant shall only retrieve such data or information upon receipt of, and in accordance with, written directions by action has been taken notwithstanding the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or information. Should Consultant receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. If Consultant experiences a security breach concerning any education record covered by this contract, then Consultant will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach return of the information; Lancaster-Lebanon IU13 shall continue to be bound by its confidentiality obligation set forth in the contract may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant to receive any information from District for a period of not less than five (5) years. In addition, Consultant agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. Upon termination of Agreement, Consultant shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant shall not retain copies of any data or information received from the District once the District has directed Consultant as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices)obligations hereunder.

Student Information. i. In the course of providing services during the term of the contract, certain personnel of Consultant may have access to student education records that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Such information confidential and is therefore protected. To the extent that Consultant’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant agrees that it shall not use education records for any purpose other than in the performance of this contract. Except as required by law, Consultant shall not disclose or share education records with any third party unless permitted by the terms of the contract or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant under this contract. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to Consultant. ii. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant shall not provide direct access to such data or information or respond to individual requests. Consultant shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or information. Should Consultant receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. iii. If Consultant experiences a security breach concerning any education record covered by this contract, then Consultant will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation set forth in the contract may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant to receive any information from District for a period of not less than five (5) years. In addition, Consultant agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. iv. Upon termination of Agreement, Consultant shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant shall not retain copies of any data or information received from the District once the District has directed Consultant as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices).

Student Information. i. The Agency acknowledges that it shall now, and in the future may, have access to and contact with confidential information of students, including but not limited to the education and/or medical records of students. Both during the term of this MOU and thereafter, the Agency covenants and agrees to hold such information in trust and confidence and to exercise diligence in protecting and safeguarding such information, as well as any other information protected from public disclosure by federal or state law or by the policies or procedures of the SLPS. The Agency will not disclose any confidential information to any third party except as may be required in the course of performing services for the SLPS hereunder or by law, and any disclosure will be in compliance with the Family Education Rights and Privacy Act (“FERPA”) and the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) In the course of providing services during the term of the contract, certain personnel of Consultant Agency may have access to student education records that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Such information confidential and is therefore protected. To the extent that ConsultantAgency’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant Agency agrees that it shall not use education records for any purpose other than in the performance of this contract. Except as required by law, Consultant Agency shall not disclose or share education records with any third party unless permitted by the terms of the contract or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant Agency under this contract. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to ConsultantAgency. ii. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant Agency will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant Agency shall not provide direct access to such data or information or respond to individual requests. Consultant Agency shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or information. Should Consultant Agency receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant Agency shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. iii. If Consultant Agency experiences a security breach concerning any education record covered by this contract, then Consultant Agency will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation set forth in the contract may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant Agency to receive any information from District for a period of not less than five (5) years. In addition, Consultant Agency agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. Upon termination of Agreement, Consultant Agency shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant Agency shall not retain copies of any data or information received from the District once the District has directed Consultant Agency as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant Agency shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices)...

Student Information. i. In the course of providing services during the term of the contract, certain personnel of Consultant may have access to student education records that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Such information confidential and is therefore protected. To the extent that Consultant’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant agrees that it shall not use education records for any purpose other than in the performance of this contract. Except as required by law, Consultant shall not disclose or share education records with any third party unless permitted by the terms of the contract or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant under this contract. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to Consultant. SLPS Revised 11/2019 ii. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant shall not provide direct access to such data or information or respond to individual requests. Consultant shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or information. Should Consultant receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. iii. If Consultant experiences a security breach concerning any education record covered by this contract, then Consultant will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation set forth in the contract may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant to receive any information from District for a period of not less than five (5) years. In addition, Consultant agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. iv. Upon termination of Agreement, Consultant shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant shall not retain copies of any data or information received from the District once the District has directed Consultant as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices).

Student Information. i. The Agency acknowledges that it shall now, and in the future may, have access to and contact with confidential information of students, including but not limited to the education and/or medical records of students. Both during the term of this MOU and thereafter, the Agency covenants and agrees to hold such information in trust and confidence and to exercise diligence in protecting and safeguarding such information, as well as any other information protected from public disclosure by federal or state law or by the policies or procedures of the SLPS. The Agency will not disclose any confidential information to any third party except as may be required in the course of performing services for the SLPS hereunder or by law, and any disclosure will be in compliance with the Family Education Rights and Privacy Act (“FERPA”) and the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) In the course of providing services during the term of the contract, certain personnel of Consultant Agency may have access to student education records that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Such information confidential and is therefore protected. To the extent that ConsultantAgency’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant Agency agrees that it shall not use education records for any purpose other than in the performance of this contract. Except as required by law, Consultant Agency shall not disclose or share education records with any third party unless permitted by the terms of the contract or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant Agency under this contract. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to ConsultantAgency. ii. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant Agency will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant Agency shall not provide direct access to such data or information or respond to individual requests. Consultant Agency shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or information. Should Consultant Agency receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant Agency shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. iii. If Consultant Agency experiences a security breach concerning any education record covered by this contract, then Consultant Agency will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation set forth in the contract may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant Agency to receive any information from District for a period of not less than five (5) years. In addition, Consultant Agency agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. Upon termination of Agreement, Consultant Agency shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant Agency shall not retain copies of any data or information received from the District once the District has directed Consultant Agency as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant Agency shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices).

Student Information. i. In the course of providing services during the term of the contractAgreement, certain personnel of Consultant Vendor may have access to student education records and/or health and medical information (“Education Records”) that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Such information is confidential and is therefore protected. To the extent that ConsultantVendor’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant Vendor agrees that it shall not use education records for any purpose other than in the performance of this contractAgreement. Except as required by law, Consultant Vendor shall not disclose or share education records with any third party unless permitted by the terms of the contract or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant Vendor under this contractAgreement. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to ConsultantVendor. ii. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant Vendor will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant Vendor shall not provide direct access to such data or information or respond to individual requests. Consultant shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor regarding District data or informationstudent Education Records. Should Consultant Vendor receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant Vendor shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. iii. If Consultant Vendor experiences a security breach concerning any education record covered by this contract, then Consultant Vendor will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation obligations set forth in the contract this Agreement may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant Vendor to receive any information from District for a period of not less than five (5) years. In addition, Consultant ▇▇▇▇▇▇ agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. iv. Upon termination of this Agreement, Consultant Vendor shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant Vendor shall not retain copies of any data or information received from the District once the District has directed Consultant Vendor as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices).

Student Information. In Agency acknowledges that in the course of providing services during the term of its MOU and the contractDSA, certain personnel of Consultant may it shall now, and in the future may, have access to student education records that are subject to the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. and the regulations promulgated there under. Per the terms of the related MOU, this information will be limited to the first name, last name, and birthdate of students. Such information is confidential and is therefore protected. To the extent that Consultant’s personnel require access to “education records” to perform Services pursuant to this Agreement, such personnel are deemed a “school official,” as each of these terms are defined under FERPA. Consultant Agency agrees that it shall not use education records for any purpose other than in the performance of this contractDSA. Except as required by law, Consultant Agency shall not disclose or share education records with any third party unless permitted by the terms of the contract DSA or to subcontractors who have agreed to maintain the confidentiality of the education records to the same extent required of Consultant Agency under this contract. For the avoidance of doubt, District will be responsible for obtaining any necessary consents from students or parents pursuant to FERPA to provide the information to Consultant. In the event any person(s) seek to access protected education records, whether in accordance with FERPA or other Federal or relevant State law or regulations, the Consultant Agency will immediately inform the District of such request in writing if allowed by law or judicial and/or administrative order. Consultant Agency shall not provide direct access to such data or information or respond to individual requests. Consultant Agency shall only retrieve such data or information upon receipt of, and in accordance with, written directions by the District and shall only provide such data and information to the District. It shall be District’s sole responsibility to respond to requests for data or information received by Vendor Agency regarding District data or information. Should Consultant Agency receive a court order or lawfully issued subpoena seeking the release of such data or information, Consultant Agency shall provide immediate notification to the District of its receipt of such court order or lawfully issued subpoena and shall immediately provide the District with a copy of such court order or lawfully issued subpoena prior to releasing the requested data or information, if allowed by law or judicial and/or administrative order. If Consultant Agency experiences a security breach concerning any education record covered by this contractDSA, then Consultant Agency will immediately notify the District and take immediate steps to limit and mitigate such security breach to the extent possible. The parties agree that any breach of the confidentiality obligation set forth in the contract DSA may, at District’s discretion, result in cancellation of further consideration for contract award and the eligibility for Consultant Agency to receive any information from District for a period of not less than five (5) years. In addition, Consultant Agency agrees to indemnify and hold the District harmless for any loss, cost, damage or expense suffered by the District, including but not limited to the cost of notification of affected persons, as a direct result of the unauthorized disclosure of education records. Upon termination of Agreement, Consultant shall return and/or destroy all data or information received from the District upon, and in accordance with, direction from the District. Consultant shall not retain copies of any data or information received from the District once the District has directed Consultant as to how such information shall be returned to the District and/or destroyed. Furthermore, Consultant shall ensure that they dispose of any and all data or information received from the District in a District-approved manner that maintains the confidentiality of the contents of such records (e.g. shredding paper records, erasing and reformatting hard drives, erasing and/or physically destroying any portable electronic devices).