FERPA Compliance and Student Data Handling

The contract requires strict adherence to the Family Educational Rights and Privacy Act (FERPA) in the handling of all student education records, mandating robust access controls to ensure only authorized personnel can view or modify sensitive data. Comprehensive data privacy measures must be implemented to safeguard personally identifiable information throughout the duration of the agreement, with explicit protocols for secure storage, transmission, and usage. Upon termination of the contract, all student records must be permanently and securely destroyed within a 30-day window to prevent unauthorized access or data exposure. The contracting entity is bound to maintain compliance throughout the term and ensure that any third parties involved also follow these requirements. This subcontract falls under NAICS code 541611 and is administered by the University of Arkansas System, with performance expected to align with federal privacy standards regardless of geographic location.