Common use of Passwords and Employee Access Clause in Contracts

Passwords and Employee Access. Contractor shall secure usemames, passwords, and any other means of gaining access to the Services or to Student Data. Contractor shall only provide access to Student Data to employees or contractors that are performing the Services. h Security Protocols. Both parties agree to maintain security protocols that meet industry standards in the transfer or transmission of any data, including ensuring that data may only be viewed or accessed by parties legally allowed to do so. Contractor shall maintain all data obtained or generated pursuant to the Service Agreement in a secure digital environment and not copy, reproduce, or transmit data obtained pursuant to the Service Agreement, except as necessary to fulfill the purpose of data requests by LEA. c Security Technology. Contractor shall employ internet industry standard measures to protect data from unauthorized access while the data is in transit or at rest. The service security measures shall include server authentication and data encryption. Contractor shall host data pursuant to the Service Agreement in an environment using a firewall that is updated according to industry standards. d Audit Rights. Upon reasonable notice, and at the request of the LEA, the LEA or the LEA's designee may audit the Contractor to verify compliance with this DPA, as required by the Utah Student Data Protection Act. 2 Dat a Breach. In the event that Contractor discovers that Student Data has been accessed or obtained by an unauthorized individual, Contractor shall provide notification to LEA within a reasonable amount of time of the incident, not to exceed 72 hours.

Passwords and Employee Access. Contractor shall secure usemames, passwords, and any other means of gaining access to the Services or to Student Data. Contractor shall only provide access to Student Data to employees or contractors that are performing the Services. h Security Protocols. Both parties agree to maintain security protocols that meet industry standards in the transfer or transmission of any data, including ensuring that data may only be viewed or accessed by parties legally allowed to do so. Contractor shall maintain all data obtained or generated pursuant to b the Service Agreement in a secure digital environment and not copy, reproduce, or transmit data obtained pursuant to the Service Agreement, except as necessary to fulfill the purpose of data requests by LEA. c e Security Technology. Contractor shall employ internet industry standard measures to protect data from unauthorized access while the data is in transit or at rest. The service security measures shall include server authentication and data encryption. Contractor shall host data pursuant to the Service Agreement in an environment using a firewall that is updated according to industry standards. d Audit Rights. Upon reasonable notice, and at the request of the LEA, the LEA or the LEA's ' s designee may audit the Contractor to verify compliance with this DPA, as required by the Utah Student Data Protection Act. 2 Dat a Data Breach. In the event that Contractor discovers that Student Data has been accessed or obtained by an unauthorized individual, Contractor shall provide notification to LEA within a reasonable amount of time of the incident, not to exceed 72 hours.

Passwords and Employee Access. Contractor shall secure usemamesusernames, passwords, and any other means of gaining access to the Services or to Student Data. Contractor shall only provide access to Student Data to employees or contractors that are performing the Services. h Security Protocols. Both parties agree to maintain security protocols that meet industry standards in the transfer or transmission of any data, including ensuring that data may only be viewed or accessed by parties legally allowed to do so. Contractor shall maintain all data obtained or generated pursuant to the Service Agreement in a secure digital environment and not copy, reproduce, or transmit data obtained pursuant to the Service Agreement, except as necessary to fulfill the purpose of data requests by LEA. c Security Technology. Contractor shall employ internet industry standard measures to protect data from unauthorized access while the data is in transit or at rest. The service security measures shall include server authentication and data encryption. Contractor shall host data pursuant to the Service Agreement in an environment using a firewall that is updated according to industry standards. d Audit Rights. Upon reasonable notice, and at the request of the LEA, the LEA or the LEA's designee may audit the Contractor to verify compliance with this DPA, as required by the Utah Student Data Protection Act. 2 Dat a Breach. In the event that Contractor discovers that Student Data has been accessed or obtained by an unauthorized individual, Contractor shall provide notification to LEA within a reasonable amount of time of the incident, not to exceed 72 hours.

Passwords and Employee Access. Contractor shall secure usemames, passwords, and any other means of gaining access to the Services or to Student Data. Contractor shall only provide access to Student Data to employees or contractors that are performing the Services. h Security Protocols. Both parties agree to maintain security protocols that meet industry standards in the transfer or transmission of any data, including ensuring that data may only be viewed or accessed by parties legally allowed to do so. Contractor shall maintain all data obtained or generated pursuant to the Service Agreement in a secure digital environment and not copy, reproduce, or transmit data obtained pursuant to the Service Agreement, except as necessary to fulfill the purpose of data requests by LEA. c e Security Technology. Contractor shall employ internet industry standard measures to protect data from unauthorized access while the data is in transit or at rest. The service security measures shall include server authentication and data encryption. Contractor shall host data pursuant to the Service Agreement in an environment using a firewall that is updated according to industry standards. d Audit Rights. Upon reasonable notice, and at the request of the LEA, the LEA or the LEA's designee may audit the Contractor to verify compliance with this DPA, as required by the Utah Student Data Protection Act. 2 Dat a Data Breach. In the event that Contractor discovers that Student Data has been accessed or obtained by an unauthorized individual, Contractor shall provide notification to LEA within a reasonable amount of time of the incident, not to exceed 72 hours.

Passwords and Employee Access. Contractor shall secure usemamesusernames, passwords, and any other means of gaining access to the Services or to Student Data. Contractor shall only provide access to Student Data to employees or contractors that are performing the Services. h Security Protocols. Both parties agree to maintain security protocols that meet industry standards in the transfer or transmission of any data, including ensuring that data may only be viewed or accessed by parties legally allowed to do so. Contractor shall maintain all data obtained or generated pursuant to the Service Agreement in a secure digital environment and not copy, reproduce, or transmit data obtained pursuant to the Service Agreement, except as necessary to fulfill the purpose of data requests by LEA. c Security Technology. Contractor shall employ internet industry standard measures to protect data from unauthorized access while the data is in transit or at rest. The service security measures shall include server authentication and data encryption. Contractor shall host data pursuant to the Service Agreement in an environment using a firewall that is updated according to industry standards. d Audit Rights. Upon reasonable notice, and at the request of the LEA, the LEA or the LEA's designee may audit the Contractor to verify compliance with this DPA, as required by the Utah Student Data Protection Act. 2 Dat a Data Breach. In the event that Contractor discovers that Student Data has been accessed or obtained by an unauthorized individual, Contractor shall provide notification to LEA within a reasonable amount of time of the incident, not to exceed 72 hours.