Non-Disclosure Agreement Protocol
Overview and Applicability
This appendix serves as an integral part of the Data Protection and Privacy Policy of KIS International School, detailing the protocols and requirements related to Non-Disclosure Agreements (NDAs) that align with the school's commitment to safeguarding personal information and maintaining privacy. The NDA protocols and requirements herein are applicable to all members of the school community, including staff, students, parents, visitors, and third-party service providers. The purpose of these NDAs is to ensure that confidential and sensitive information, encompassing but not limited to personal data as defined under the main policy, is not disclosed to unauthorized parties, thereby reinforcing the school's adherence to ethical standards and legal obligations under the Personal Data Protection Act (PDPA) and other relevant legislation.
Definitions
- Confidential Information: Information that is proprietary to KIS International School and is disclosed under the conditions of an NDA, including student, staff, and operational data not publicly available.
- Recipient: The individual or entity that agrees to receive confidential information under the terms of the NDA.
Non-Disclosure Agreement (NDA) Procedures
Requirements
- Execution of NDAs: All staff, contractors, and third-party service providers with access to confidential information must sign an NDA before commencing their engagement with the school.
- Duration and Scope: NDAs will specify the duration for which the recipient is bound to keep the information confidential, which, in most cases, will extend beyond the term of their engagement with the school to ensure ongoing protection of sensitive information.
- Handling of Confidential Information: The NDA will outline appropriate measures for handling and protecting confidential information, including secure storage, restricted access, and protocols for data transfer.
- Breach of NDA: The consequences of breaching the NDA, including potential legal action and compensation for damages, will be clearly stated to deter unauthorized disclosure of information.
- Termination Procedures: Procedures for the return or secure destruction of confidential information upon termination of the relationship with the school will be explicitly defined.
- Regular Training: Regular training sessions will be conducted for all individuals bound by NDAs to ensure they understand their responsibilities and the legal implications of violating the agreement.
- Compliance Monitoring: The school's Data Protection Officer (DPO) will be responsible for monitoring compliance with NDA requirements, conducting periodic reviews to ensure that confidential information is handled in accordance with the agreement.