Contracts Must Include The Following Provisions:

1. a statement that student data are not the property of, or under the control of, a software or electronic service contractor;

2. a description of the means by which a board of education may request the deletion of student data in the possession of the contractor;

3. a statement that the contractor will not use student data for any purposes other than those authorized pursuant to the contract;

4. a description of the procedures by which a student, parent, or guardian may (a) review personally identifiable information in student data and (b) correct erroneous information, if any;

5. a statement that the contractor shall take actions designed to ensure the security and confidentiality of student data;

6. a description of the procedures that a contractor will follow for notifying a local or regional board of education when there has been an unauthorized release of student data;

7. a statement that the student data shall not be retained or available to the contractor upon completion of the contracted services unless a student, parent or legal guardian of a student chooses to establish or maintain an electronic account with the contractor for the purpose of storing student-generated content;

8. a statement that the contractor and the local or regional board of education will ensure compliance with the federal Family Educational Rights and Privacy Act of 1974 (FERPA);

9. a statement that Connecticut law governs the rights and duties of all parties to the contract; and

10. a statement that a court finding of invalidity of any contract provision does not invalidate other contract provisions or applications that are not affected by the finding.