PBIS Rewards State Specific Policy & Notices

PBIS Rewards complies with the Student Online Personal Information Protection Act (SOPIPA) of California (SB 1177). PBIS Rewards does not use any data about students for any purpose other than delivering the PBIS Rewards service. PBIS Rewards does not engage in targeted advertising to students or parent/guardians of students. PBIS Rewards does not sell any information gathered about students regardless of the source of the information. PBIS Rewards does not create profiles on students except that which is necessary to provide reports to the School/School District as required for the operation of the PBIS Rewards service. PBIS Rewards stores and protects student data using industry best practices. PBIS Rewards will delete a student’s covered information if requested by the School/School District.

PBIS Rewards is compliant with SOPIPA. PBIS Rewards does not do any advertising, including targeted advertising, towards students or parents of students. PBIS Rewards will delete data about a student or students upon request from the School/School District. PBIS Rewards uses industry best practices to protect data about and for students.

PBIS Rewards complies with AB 1584 of the California Education Code.

• Pupil Records Ownership: See Provision 2.10 of TOS.
• Pupil-Generated Content: There is no pupil-generated content.
• Pupil Record Use: See Provision 2.6 of TOS.
• Parent/Legal Guardian/Pupil Review of PII: See Provision 3 of TOS.
• PBIS Rewards Staff Training: See paragraph 3 of Provision 2.12 of TOS.
• Notification in the Event of Unauthorized Disclosure: See paragraph 4 of Provision 2.12 of TOS.
• No Retainment of Student Data: See Provision 2.9 of TOS.
• FERPA: See Provision 3 of TOS.
• No Pupil Targeted Advertising: See Provision 2.3 of TOS.

PBIS Rewards is compliant with all nine requirements of the AB 1584 of the California Education Code. This section lists all nine requirements and points to the applicable provision from the PBIS Rewards Terms of Service.

PBIS Rewards complies with the California Consumer Privacy Act of 2018 (CCPA).

• Notice: See Provision 2 of CCPA Notice.
  PBIS Reward’s CCPA Notice will be clearly posted on our website and is updated once a year.
• Use & Sale of Personal Information: See Provision 2.3, 2.6, & 2.8 of TOS.
  PBIS Rewards never sells personal information it receives from a School/School District. We never share personal information with third parties. Personal information disclosed to a service provider is done only when necessary in the delivery of the service to the School/School District.
• Information Collected: See Provision 1, 2, & 4 of CCPA Notice.
  Consumers have the right to make a request on the specifics of the personal information we collect including what is collected, why it is collected, how it is collected, and/or from what sources it is collected. Consumers also have the right to request to whom PBIS Rewards discloses personal information.
• Correction & Deletion of Personal Information: See Provision 5 of CCPA Notice.
  Consumers have the right to request the deletion or correction of personal information.
• Exercising CCPA Rights: See Provision 7 of CCPA Notice.
  PBIS Rewards does not discriminate against consumers who exercise their rights under the CCPA.
• Verified Consumer Requests (VCRs): See Provision 7 of CCPA Notice.
  PBIS Rewards offer two ways for consumers submit a VCR and maintains records of such.

PBIS Rewards is compliant with the CCPA. School/School districts are provided with our CCPA Notice before we collect personal information. We respect the value of your rights under the CCPA and provide avenues for you to exercise them. We never sell personal information. A detailed explanation of the steps we take to satisfy the requirements of the CCPA can be found in our CCPA Notice located online at: https://www.pbisrewards.com/policies/ccpa/.

PBIS Rewards complies with the requirements outlined in HB16-1423 and C.R.S. 22-16-101 et seq.

• Data Transparency
  Posted on our website policy page are the data elements of student personally identifiable information we receive, how we use that information, and how that information is shared. Clear notice of any material policy changes will be provided to the School/School District. Since the School/School District maintains the data we receive, any corrections of student information can be made by the School/School District. In the event of a data breach, we will notify the School/School District as soon as possible.
• Use of Data
  PBIS Rewards only receives, uses, and shares data for the purpose authorized in our contracts with Schools/School Districts. Student personally identifiable information is never used for targeted advertising or sold to any party. Any necessary subcontractors are contractually obligated to abide by the same data use, security, and destruction standards we do. Our agreements with subcontractors also include our Terms of Service that we have with our schools.
• Data Destruction
  PBIS Rewards follows industry best standards when it comes to administrative, technical, and physical safeguards of data we receive. We comply with any School/School District requests to destroy student personally identifiable information. Except in the case of a renewal, all data is destroyed after the expiration of service and notice of destruction is sent to the School/School District.

If any of the terms and policies differ or conflict with the School/School District’s, the terms and policies of the School/School District will supersede the PBIS Rewards term or policy.

PBIS Rewards complies with the requirements outlined in Connecticut General Statutes § 10-234aa through § 10-234dd.

• Contractor Requirements
  Any student information PBIS Rewards receives is owned and maintained by the School/School District and data is only used pursuant to the purpose authorized in our contract. PBIS Rewards follows industry best standards when it comes to security and confidentiality of data we receive. PBIS Rewards is compliant with FERPA. Any contract or agreement between a Connecticut School/School District shall be interpreted and governed by the laws of the State of Connecticut. Except in the case of a renewal, all student information is destroyed after the expiration of service.
• Operator Requirements
  PBIS Rewards does not engage in targeted advertising to students or parent/guardians of students. PBIS Rewards does not sell any information gathered about students or teachers regardless of the source of the information. Any necessary subcontractors are contractually obligated to abide by the same data use, security, and destruction standards we do.
• Unauthorized Disclosure
  PBIS Rewards has a Security Incident Response Plan in the event of an unauthorized disclosure. PBIS Rewards will promptly notify the School/School District; notification includes full disclosure and cooperation.

If any of the terms and policies differ or conflict with the School/School District’s, the terms and policies of the School/School District will supersede the PBIS Rewards term or policy.

PBIS Rewards complies with the requirements outlined in Fla. Stat. § 1002.22 and Fla. Stat. § 1002.222.

Any data PBIS Rewards receives from the School/School District is subject to the Family Educational Rights and Privacy Act (FERPA). No biometric data of students, parents, or teachers is collected.

If any of the terms and policies differ or conflict with the School/School District’s, the terms and policies of the School/School District will supersede the PBIS Rewards term or policy.

PBIS Rewards complies with the requirements outlined in the EDUCATION LAW §2-D BILL OF RIGHTS FOR DATA PRIVACY AND SECURITY and the Commissioner of Education’s Regulations at 8 NYCRR Part 121.

• Data Security and Privacy
  PBIS Reward’s complies with federal and state laws and follows industry best standards for our administrative, operational, and technical safeguards to protect data. Our employees complete monthly trainings regarding the protection, privacy, and confidentiality of data. Any necessary subcontractors are contractually obligated to abide by the same data use, security, and destruction standards we do. Except in the case of a renewal, all data is destroyed or returned to the School/School District after the expiration of service.
• Use of Data
  PBIS Rewards only receives, uses, and shares student personally identifiable information for the purpose authorized in our contracts with Schools/School Districts. PBIS Rewards policies align with the NIST Cybersecurity Framework. Access to data is limited to those employees who need access so we can provide our platform and service. Data that is transmitted through PBIS Rewards is encrypted, in transit and at rest. PBIS Rewards never sells data it receives.
• Breach of Data
  PBIS Rewards has a Security Incident Response Plan in the event of a data security or privacy incident. PBIS Rewards will promptly notify the School/School District; notification includes full disclosure and cooperation.

If any of the terms and policies differ or conflict with the School/School District’s Bill of Rights for Data Privacy and Security, then the terms and policies of the School District will supersede anything in the PBIS Rewards Terms of Service.

PBIS Rewards complies with the Education Department General Administrative Regulations (EDGAR), 2 C.F.R. § 200.326, and Appendix II to Part 200.

All PBIS Rewards contracts include terms addressing administrative, contractual, legal remedies, and termination by the parties.

When applicable, PBIS Rewards acts in accordance with the Texas Family Code, Equal Employment Opportunity law, Davis-Bacon Act, Contract Work Hours and Safety Standards Act, Federal Award Funding Agreement law, Clean Air Act, Federal Water Pollution Control Act, Debarment and Suspension Executive Orders, Byrd Anti-Lobbying Amendment, Immigration Law and Regulations, Record Retention Law, EPA Regulations, Energy Policy and Conservation Act, Solid Waste Disposal Act, and the Buy America Act. PBIS Rewards is not a company identified on the Texas Comptroller’s list of companies known to have contacts with a Foreign Terrorist Organization, nor does PBIS Rewards boycott Israel.

Contracts with PBIS Rewards comply with EDGAR Regulations for Agreements Funded by U.S. Federal Grant.

PBIS Rewards complies with the requirements regarding third-party contractors outlined in Title 53E-9-309 of the Utah Code.

Required Provisions

• Requirements and Restrictions of Collection: See Provision 2.5, 2.6, 2.8 of TOS.
• Sharing of Student Data: See Provision 2.8 of TOS.
• Deletion of Student Data: See Provision 2.9 of TOS.
• Limited Use of Data: See Provision 2.6 of TOS.

The School/School District may audit PBIS Rewards to ensure compliance, upon request. Except in the case of a renewal, all student information is destroyed or returned after the expiration of service.

If any of the terms and policies differ or conflict with the School/School District’s, the terms and policies of the School/School District will supersede the PBIS Rewards term or policy.