Agmt 21 John W. Gardner Center - Laserfiche WebLink

Browse Search

REV: 04-27-2021 MI Because the GCDA will match incident-level data with anonymized identifiers of individuals, these data are expected to contain confidential information, the disclosure of which is restricted by a provision of law. Some examples of "confidential information" include, but are not limited to, "personal information" about individuals as defined in California Civil Code Section 1798.3 of the Information Practices Act and “personal information” about students as defined by the Code of Federal Regulations CFR Title 34 Volume 1 Part 99.3. C. TRANSFER OF DATA Redwood City and JGC shall use a secure, mutually agreed upon means and schedule for transferring confidential information. Redwood City will create data extracts and validate the data. Extracts will be updated using a mutually agreed upon schedule. At no time will data be sent electronically to or from the parties, except via a mutually agreed and secure file transfer protocol system. D. PERIOD OF AGREEMENT This Agreement shall be effective per specifications in Attachment B, unless terminated earlier by either party pursuant to Section F. E. JGC RESPONSIBILITIES JGC agrees to the following confidentiality statements: 1. JGC acknowledges that these data are confidential data and proprietary to Redwood City, and agree to protect such information from unauthorized disclosures and comply with all applicable confidentiality laws which may include but is not limited to, the Health Insurance Portability and Accountability Act (HIPAA), the California Education Code and the Family Education Rights and Privacy Act (FERPA) as set forth in this agreement. JGC is responsible for complying with all District, Local, State and Federal confidentiality applicable laws and regulations. 2. JGC will use appropriate safeguards to prevent the use or disclosure of the information other than as provided by this data use Agreement. Servers, laptop and desktop computers, mobile devices, and software applications that will be used for transfer, storage, management, manipulation, and analysis of Redwood City’s data will comply with Stanford University’s Minimum Security Standards for High Risk data (accessible at https://uit.stanford.edu/guide/securitystandards#security-standards-servers). 3. JGC shall (a) instruct all staff with access to confidential information about the requirements for handling confidential information (b) provide all staff with access to confidential information statements of organizational policies and procedures for the protection of human subjects and data confidentiality and (c) notify staff of the sanctions against unauthorized disclosure or use of confidential and private information. JGC will ensure that all staff and subcontractors, to whom they provide the limited data sets obtained under this Agreement, agree to the same restrictions and conditions that apply to JGC in this Agreement with respect to such information. Other than as provided herein, no confidential data will be released by JGC. ATTY/AGR.2021.088/Gardner Center-Stanford (Page 2 of 7)