Appendix N Exhibits A-B.xlsx

Directions

PRINCE GEORGE’S COUNTY PUBLIC SCHOOLS

DATA PRIVACY AND SECURITY AGREEMENT (DPSA) - EXHIBITS A and B

- For each data field you will store, process, access or use:

- Place an X to indicate if the field is “required” or “optional”.

- Specify if the data will be used on an individual level or in an aggregated form, as applicable,

- Include a clear purpose for each data field.

- Each purpose should be clearly linked to student learning or system security as Maryland law (MD § 4-131) strictly prohibits the use of student data for non-educational profiling or commercial gain.

- If a data field will not be used, select "Not used"

Provide a clear, detailed response for each section.

- If needed, PGCPS will contact the vendor to discuss "Pending" items.

- The finalized version of Exhibit A will be included in the PDF version of the DPSA prior to final vendor signatures.

https://bit.ly/PGCPS_DPSAExhibitA ExhibitA (Pt1) Data Fields

For each data element, place an "X" in the relevant column (Required, Optional, Not Used).

If a data element is required or optional, include a clear purpose that is linked student learning or system security as Maryland law (MD § 4-131) strictly prohibits the use of student data for non-educational profiling or commercial gain.

Communications (e.g., conversations comments, messaging) Services Technology Metadata Services Usage Statistics

Assessments and Results (specify type)**

Video or Voice Recording* (specify type and purpose)

Conduct Data* Student Incident Status* Student Demographics Student Date of Birth Student Ethnicity and/or Race (specify) Student Gender Student Language Information Student Name (first and/or last) Student Place of Birth* Student Pronouns Employee (Teacher/staff) Data Educator/Staff Email address Educator/Staff Name (first and/or last) Educator/Staff ID Number Educator/Staff Mailing address* Educator/Staff Phone Number Educator/Staff Disability Identifier and/or Status* Educator/Staff Health Data / Medical Alerts* Educator/Staff Political or Religious Affiliation* Educator/Staff Social Security Number* Educator/Staff Video or Voice Recording* Student Enrollment Student Gifted Program Status* Student Grade Level Student Graduation Year Student Guidance Counselor Student Homeroom Student Program Membership (specify) Student School Enrollment - Current Student School Enrollment - Past* Student Specific Curriculum Programs*

Email address* Parent/Guardian Name (first and/or last) Parent/Guardian ID number (to link parents to students)* Parent/Guardian Phone Number Student Schedule Student Assigned Courses Student Scheduled Courses Student Scheduled Courses with Teacher Name Student Special Indicators Student Disability Identifier and/or Status* Student Disability Information* Student Economically Disadvantaged Status* Student English Language Learner Identifier* Student Foster Care Status*

Houseless Status* Student Low Income Status* Student Military Child Status* Student Specialized Education Services* Student Contact Information Student Email Address Student Mailing Address* Student Phone Number Student Identifiers Student Generated Content Student Survey Responses*

Biometric Data* Student District ID number Student Photo* Student Political or Religious Affiliation* Student SIS Identifier/Number Student Social Security Number* Student State ID number Student Username & Password*

Badge or Microcredential Assertion Data User Biographical Information User Gender*

(where user is not student) User Pronouns (where user is not student) User IP Address* User Geolocation information General (e.g., city/state) User Geolocation information Specific (street)* User Mobile Device Identifier* User Mobile Device MAC Address* User Mobile Device Serial Number* User Payment Card Data* User Profile Avatar or Pictures* User Single Sign-On Credentials* Persistent unique identifiers

Defined as identifiers that "can be used to identify, recognize, track, single out, or make references about a student enrolled in prekindergarten through grade 12, the parent or guardian of the student, and any other student of whom the parent or guardian has custody.

(indicate specific purpose)

(describe type of information and purpose)

000000&F

000000&A-&P

ExhibitA (Pt 2) Vendor Security

Priovide detailed responses regarding your security standards, for each of the following areas.

Where available, a SOC 2 report or ISO 27001 Certificate (with Statement of Applicability) may be submitted in place of responses. Indicate "Third party report submitted" below, to acknowledge blank fields are not an omission. If a current (<18 months old) report or certificate is not available, provide details responses for each area below.

000000&F

000000&A-&P

Exhibit B - Subprocessor List

Please list all currently approved Subprocessors below and complete all fields.

If no subprocessors are used, select the checkbox in the DPSA.

Subprocessor Name Subprocessor Address Processing Activities Specific Institution Data Processed Processing and/or Hosting Geographic Location

000000&F

000000&A - &P