Contracts Must Include The Following Provisions:

1. a statement that student data are not the property of, or under the control of, a software or electronic service contractor;
2. a description of the means by which a board of education may request the deletion of student data in the possession of the contractor;
3. a statement that the contractor will not use student data for any purposes other than those authorized pursuant to the contract;
4. a description of the procedures by which a student, parent, or guardian may (a) review personally identifiable information in student data and (b) correct erroneous information, if any;
5. a statement that the contractor shall take actions designed to ensure the security and confidentiality of student data;
6. a description of the procedures that a contractor will follow for notifying a local or regional board of education when there has been an unauthorized release of student data;
7. a statement that the student data shall not be retained or available to the contractor upon completion of the contracted services unless a student, parent or legal guardian of a student chooses to establish or maintain an electronic account with the contractor for the purpose of storing student-generated content;
8. a statement that the contractor and the local or regional board of education will ensure compliance with the federal Family Educational Rights and Privacy Act of 1974 (FERPA);
9. a statement that Connecticut law governs the rights and duties of all parties to the contract; and
10. a statement that a court finding of invalidity of any contract provision does not invalidate other contract provisions or applications that are not affected by the finding.