Fairfax County School Board

Buyer seeks a provider to enter into a Student Data Privacy Agreement to protect personally identifiable student information. The agreement establishes duties to safeguard student data in compliance with FERPA, PPRA, and COPPA regulations. Provider must implement security measures, maintain confidentiality, and establish proper data handling protocols. The agreement requires prompt notification of data breaches and proper data disposal procedures.

• 5/12/2025 - Proposal Due Date

• Ability to protect student data following federal privacy laws
• Compliance with FERPA, PPRA, and COPPA regulations
• Implementation of industry-recognized cybersecurity framework
• Capability to conduct annual security audits

• Implement administrative, physical, and technical safeguards to protect student data
• Conduct security audit or assessment annually and after any data breach
• Establish procedures for parents to review and request data deletion
• Develop written data breach response plan following industry standards
• Properly dispose of student data upon agreement termination
• Enter subprocessor agreements with all third parties accessing student data
• Maintain compliance with federal and state privacy laws
• Provide notification within 48 hours of data breach confirmation
• Implement adequate cybersecurity framework following recognized standards
• De-identify student data following NIST standards