Data Privacy, Security, and FERPA Compliance Management

The contract requires the implementation of comprehensive data protection protocols aligned with the Family Educational Rights and Privacy Act, mandating that all education-related data be stored exclusively on U.S.-based servers and transmitted using secure, encrypted methods to prevent unauthorized access. Annual privacy training must be completed by all personnel handling sensitive information to ensure ongoing compliance and awareness of federal standards. Upon contract termination, the contractor must provide formal certification verifying the secure and irreversible destruction of all data, ensuring no residual records are retained. These requirements apply across all activities under the agreement, regardless of location, and are non-negotiable conditions for performance. The contract is classified as a subcontract under NAICS code 541611 and was posted by the state of Utah with a response deadline of July 15, 2026. Although no specific solicitation number or point of contact is provided, the opportunity is accessible through the Utah BonfireHub platform. There is no set-aside classification indicated, and the place of performance lacks defined geographic constraints, but all data handling must adhere strictly to the stipulated compliance framework. The emphasis is on continuous adherence to FERPA through technical, procedural, and administrative safeguards, with accountability enforced through documented verification and certification at key stages of the engagement.