Reporting of Unauthorized Disclosures or Misuse of FERPA Records and Information. Contractor, within one (1) day after discovery, will report to University any use or disclosure of FERPA Records not authorized by this Addendum. Contractor’s report will identify: (i) the nature of the unauthorized use or disclosure, (ii) the FERPA Records used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or will do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or will take to prevent future similar unauthorized use or disclosure. Contractor will provide such other information, including written reports, as reasonably requested by University. For purposes of this Section 2.3, an unauthorized disclosure or use includes any access or use of an “Education Record” (as defined by FERPA) by a Contractor employee or agent that the employee or agent does not require to perform Work or access by any employee or agent that does not involve the provision of Work.
Reporting of Unauthorized Disclosures or Misuse of FERPA Records and Information. Contractor, as soon as practicable, but no later than 72 hours after discovery, will report to Institution any use or disclosure of FERPA Records not authorized by the Underlying Agreement and this FERPA Addendum. Contractor’s report will identify: (i) the nature of the unauthorized use or disclosure, (ii) the FERPA Records used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what Contractor has done or will do to mitigate any deleterious effect of the unauthorized use or disclosure, and (v) what corrective action Contractor has taken or will take to prevent future similar unauthorized use or disclosure. Contractor will provide such other information, including written reports, as reasonably requested by Institution. For purposes of this Section 2.3, an unauthorized disclosure or use includes any access or use of an Education Record by a Contractor employee or agent that the employee or agent does not require to perform the Services or access by any employee or agent that does not involve the provision of the Services.
Reporting of Unauthorized Disclosures or Misuse of FERPA Records and Information. Contractor, within one (1) day after discovery, will report to University any use or disclosure of FERPA Records not authorized by this Addendum. Contractor’s report will identify: (i) the nature of the unauthorized use or disclosure, (ii) the FERPA Records used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure,
