DG-2024-0011 AG MARICOPA FINAL DRAFT.PDF

Maricopa County — Formal (2024-09-25)

View PDF Item 27 Meeting page

Extracted text (via pymupdf) 32801 characters
Data Sharing Agreement 
#DG-2024-0011 
Between the Arizona Department of Education 
and Maricopa County, by and through the Maricopa County 
Attorney’s Office   
This Data Sharing Agreement (Agreement or DSA) is made by and between the Arizona 
Department of Education (ADE) and Maricopa County, by and through the Maricopa County 
Attorney’s Office (the Agency).  
A. Parties: 
ADE is a state educational agency, authorized to collect and maintain student educational 
records and to receive information from local educational agencies consistent with 
applicable state and federal laws and subject to the Family Educational Rights and 
Privacy Act (FERPA), 20 U.S.C. § 1232g(b) and 34 CFR Part 99. Consistent with 
FERPA, ADE may disclose personally identifiable information (PII) from students’ 
education records to its authorized representative without written consent in connection 
with the audit or evaluation exception of FERPA pursuant to 20 U.S.C. 1232g(b)(1)(C), 
(b)(3), and (b)(5) and 34 CFR §§ 99.31(a)(3) and 99.35. Additionally, ADE is permitted 
to re-disclose data pursuant to 34 CFR § 99.33 on the condition that the party it discloses 
the data to will not re-disclose the data unless a valid FERPA exception applies. 
ADE is led by the Superintendent of Public Instruction. The Superintendent is required to 
make a report to the legislature and governor each year. The report must include “plans 
for the management of schools” and “other information related to the educational 
interests of this state as he deems expedient.”  Arizona Revised Statutes (A.R.S.) § 15-

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 2 of 19 
 
 
255(B)(11)-(12). The Superintendent is tasked with directing the “performance of 
executive, administrative or ministerial functions” of ADE and its employees; thus ADE 
enters into this Agreement pursuant to this direction and in accordance with A.R.S. §15-
251(5).  
The Agency is Maricopa County acting through the Maricopa County Attorney’s Office, 
which performs the duties as described under A.R.S. §§ 11-531 et seq. 
B. Purpose and Description of Maricopa County Attorney’s Investigation  
  
The purpose of this Agreement is to formally designate the Agency as its authorized 
representative, as that term is defined in FERPA. 20 U.S.C. §§ 1232g(b)(3) and (5), 34 
C.F.R. §§ 99.31(D)(9)(i) and (9)(iii)(a).  
(9) (i) The disclosure is to comply with a judicial order or lawfully issued 
subpoena. 
(iii) (a) If an educational agency or institution initiates legal action against 
a parent or student, the educational agency or institution may disclose to 
the court, without a court order or subpoena, the education records of the 
student that are relevant for the educational agency or institution to 
proceed with the legal action as plaintiff. 
The Agency acknowledges that it will receive student data and information that will include 
PII and that the Agency is responsible for safeguarding the confidentiality of that data and 
information in accordance with the terms of this Agreement, FERPA, and all other federal 
and state law.   
C. PII and Other Confidential Data That Will Be Disclosed: 
Investigative materials, files, and data contained therein. ADE will provide at minimum 
the data described below in a spreadsheet.  
• Date Submitted 
• Application ID 
• Applicant (Parent) 
• Applicant email 
• Student name 
• Date of Birth (DOB) 
• Application Type 
• Funds Gained/ordered 
• Application Status 
• BC State 
• BC Confirmed as forged? Y / N 
• POR Type

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 3 of 19 
 
 
• ADE Case # 
• Notes  
Other documentation will be provided upon request such as: 
• Administrative- ESA Application 
• Application Status History 
• Uploaded Documents 
• Signed Contracts 
• Student Analysis Report (SSID) 
• ClassWallet Expenses 
• Correspondence with the Account Holder 
 
D. Policies and Procedures Consistent with FERPA and Other Federal and State Laws: 
To affect the transfer of data and information that is subject to state and federal 
confidentiality laws and to ensure that the required confidentiality of PII shall always be 
maintained, the Agency agrees that it will: 
1. 
Comply with the provisions of FERPA, 20 U.S.C. § 1232g, and regulations at 
34 CFR Part 99, and all applicable state laws regarding confidentiality of 
student data;  
2. 
Any data in this agreement that is covered by Part B or Part C of the IDEA is 
also subject to FERPA and any applicable FERPA exceptions pursuant to 34 
CFR § 300.622 and 34 CFR 303.414, respectively; 
3. 
Protect the data provided under this Agreement to the same extent that the 
Agency safeguards like information of its own, and to ensure that such data is 
not copied, reproduced or transmitted, except in accordance with 20 U.S.C. § 
1232g(b); 
4. 
Use the data provided under this Agreement for no other purpose than that 
described herein; 
5. 
Use reasonable technical, administrative and physical controls to protect the 
data provided under this Agreement from further disclosures and other uses, 
except as provided in 34 CFR § 99.33; 
6. 
Promptly report in writing to ADE if it becomes aware of any use or disclosure 
of the data that is not permitted by this Agreement or by law. This written report 
shall provide as much specific information as possible regarding the nature of 
the violating use or disclosure, the information used or disclosed, the identity of 
the person who used the data or made the disclosure, the corrective action the 
Agency has taken or will take to prevent further disclosure, including any 
mitigation, and any other information requested by ADE;   
7. 
The Agency will establish and follow procedures consistent with FERPA and 
Arizona law to ensure the protection of any and all PII provided under this 
Agreement. To effectuate this provision, the Agency agrees to:

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 4 of 19 
 
 
a. Limit access to the data provided under this Agreement only to those 
authorized persons who have a legitimate interest in the data; 
b. Require all employees, contractors and agents who have access of any 
kind to the data provided under this Agreement to comply with this 
Agreement, FERPA, and applicable Arizona law; 
c. Maintain all data received pursuant to this Agreement in a secure manner, 
separate from all other data files, and not copy, reproduce, or transmit data 
obtained pursuant to this Agreement except to its own agents acting for or 
on behalf of ADE and as necessary to fulfill the purposes described herein;   
d. Not disclose any data provided under the Agreement or any addenda to it 
in any manner that could identify any individual student, except as 
authorized by FERPA;   
e. Conduct its work in a manner that does not permit the personal 
identification of students or parents by anyone other than representatives 
of the Agency with legitimate interests in the information. 
 
E. Data Accuracy:  
The data provided in the course of this DSA are the most accurate and complete data 
available. The ADE cannot ensure absolute accuracy of all records and fields as the 
source data belongs to schools / Local Education Agencies. Some records and or 
variables may include incorrect or incomplete data. Wherever possible, the ADE will 
inform the Agency as to any systematic problems or concerns regarding the data.  
Data that has been manipulated by the Agency is the responsibility of the Agency.  
F. Policies and Procedures Consistent with Privacy and Security standards  
 
The parties acknowledge that the Arizona Department of Administration was mandated 
to develop, implement, and maintain statewide security policies and standards (A.R.S. § 
18-105).  
  
The statewide policies and standards apply to ADOA-ASET and all other State of 
Arizona Budget Units. A State of Arizona Budget Unit is defined as a department, 
commission, board, institution, or other agency of the State receiving, expending, or 
disbursing state funds or incurring obligations of the State; including the Arizona Board 
of Regents but excluding the universities under the jurisdiction of the Arizona Board of 
Regents, the community college districts and the legislative or judicial branches. A.R.S. § 
18-101. The Budget Unit chief executive officer (CEO), working in conjunction with the 
Budget Unit chief information officer (CIO), shall be responsible for ensuring the 
effective implementation of Statewide Information Technology Policies, Standards, and 
Procedures (PSPs) within each Budget Unit.   
  
Notwithstanding the foregoing, if the Agency is not a State of Arizona Budget Unit, the 
Agency is still expected to support Arizona Department of Homeland Security (ADOHS)

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 5 of 19 
 
 
Security and Privacy compliance and therefore shall adhere to statewide security policies 
and standards.    
  
If the Agency is found not to be in compliance with the statewide policy and standards, 
ADOHS will be available on a time and materials basis, to assist the Agency in achieving 
compliance. If the Agency chooses not to reach or maintain compliance with these 
standards, termination of service with ADE may result.  
  
https://azdohs.gov/information-technology-it-policies-standards-and-procedures  
G. Artificial Intelligence (AI) Prohibitions: 
 
Consistent with State policy, the Agency is prohibited from using State of Arizona 
Materials or Data in generative AI queries for building or training proprietary generative 
AI programs unless explicitly approved in advance by the State in writing. 
H. Effective Date and Term of Agreement: 
This Agreement shall take effect upon its signing by all parties, can be executed in parts, 
and shall remain in effect until June 20, 2029, unless terminated, canceled, or extended 
as provided herein. This Agreement may be canceled upon 30 days written notice by 
either party.      
This Agreement may only be amended by a writing signed by both parties. Amendments 
cannot extend the agreement beyond five years from the starting date of the agreement. 
The agreement cannot be amended within six (6) months of the termination date. 
I. Agreement Termination: 
The ADE may terminate this Agreement immediately and without notice if it perceives 
any violation of the terms of this Agreement. If the Agency breaches the terms of this 
Agreement, the ADE will terminate the agreement and no longer provide data to the 
Agency. In this event this Primary Agreement is terminated, the Agency shall return or 
destroy any PII in its custody or control immediately. 
J. Restrictions on Use: 
The Agency will use the data provided under this Agreement for no purposes other than 
those described herein. 
The Agency agrees not to redisclose to a third party any data obtained pursuant to the 
Agreement unless expressly authorized to do so by ADE in writing prior to such 
disclosure.

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 6 of 19 
 
 
The Agency agrees that all representatives who will come in contact with the data 
provided under this Agreement will sign and abide by the Non-Disclosure Agreement in 
Appendix B.  
K. Method of Sharing Data: 
Once this Agreement is signed by all parties, data sharing will occur in one of the following 
ways. Select one option.   
☒  a. The ADE will send data files(s) via secure file delivery system sharing (e.g., 
BisCom)  
☐ b. The ADE will provide a unique username and password for the approved 
persons to access a virtual computer. Data files cannot be removed without written 
permission from ADE. ADE periodically conducts data audits, during those times, 
access may be paused for 2 to 3 business days. If researchers leave or join the project, 
the Agency needs to notify ADE within 1 to 3 business days. The Agency needs to 
provide NDAs for the new researcher(s) and request new username(s). Virtual access 
will be terminated at the end of the DSA agreement, all files stored on ADE virtual 
computers will be deleted. ADE reserves the right to charge, and the Agency agrees 
to pay, reasonable fees and costs associated with sharing the data.  
 
☐  c. In-person access at the ADE building supervised by ADE staff. 
If applicable, the ADE Empowerment Scholarship Account and Associate Superintendent 
John Ward have agreed to support this request.  
L. Security Breaches or FERPA Violations:  
The Agency shall be responsible for notifying the ADE in the event of any unauthorized 
access or possible data breach within one business day of discovery. 
If the ADE believes the Agency has violated FERPA, ADE shall conduct a breach 
investigation and may contact the U.S. Department of Education’s Student Privacy Policy 
Office. 
M. Data Destruction: 
 
Upon termination of this Agreement, the Agency shall no longer have access to ADE 
data.  
If the Agency received data files via secure file transfer (see Section K) shall provide 
ADE a notarized or certified statement (see Appendix C) affirming that it has destroyed 
all data and related documents, not including publications/reports reviewed by the ADE, 
provided to it under the terms of this Agreement. Such statement shall be provided to the 
ADE no later than 20 calendar days after termination of the Agreement.

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 7 of 19 
 
 
In the event that the Maricopa County Attorney’s Office cannot destroy the data at the 
conclusion of the agreement, Maricopa County Attorney’s Office will advise ADE that it 
will retain the documents. The Maricopa County Attorney’s Office will be responsible to 
maintaining the PII consistent with state and federal law.  
If the Agency has Virtual Access to ADE data (see Section K), the Agency will have 
access to the files during DSA agreement and at end of agreement all work product will 
be deleted. The username and password will be terminated at the end of the Agreement.  
The ADE will send notice to the Agency three (3) months prior to the agreement’s 
expiration date to prepare for the data destruction process.  
 Please refer to https://azdohs.gov/information-technology-it-policies-standards-and-
procedures 8250 Media Protection.  
N. Authorized Signatory and Notice: 
The ADE and the Agency designate the following individual as an authorized signatories 
for each party. These individuals or their properly designated designees or successors 
must execute any related amendments to this Agreement. The information regarding the 
signed Agreement will be posted on ADE’s website. Notice under this Agreement shall 
be given to: 
Arizona Department of Education 
 
_____________________________   
Date________ 
John Ward 
Associate Superintendent Sponsor  
Arizona Department of Education 
 
_____________________________   
Date________ 
Margaret Dugan 
Deputy Superintendent 
1535 W. Jefferson St. 
Phoenix, AZ 85007

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 8 of 19 
 
 
 
MARICOPA COUNTY: 
 
__________________________________________ 
___________________ 
Jack Sellers; Chairperson,  
 
 
 
 
 
Date 
Maricopa County Board of Supervisors 
 
 
 
_____________________________________ 
 
___________________ 
Rachel Mitchell 
 
 
 
 
 
            Date 
 
ATTEST: 
 
By: __________________________________ 
 
___________________ 
Maricopa County Clerk 
 
 
 
 
 
Date 
 
APPROVED AS TO FORM: 
 
By: __________________________________ 
 
___________________ 
Deputy County Attorney 
 
 
 
 
 
Date 
   
 APPENDIX A 
 
Applicable Privacy Regulations 
 
Put in X in 
the boxes 
that apply 
Regulation 
Description

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 9 of 19 
 
 
 
FEDERAL REGULATIONS 
 
x  
7 CFR 246.26 
WIC Confidentiality Provisions 
 X 
20 CFR 603, 
Federal-State Unemployment Compensation (UC) 
Program; Confidentiality and Disclosure of State 
UC Information 
 X 
34 CFR Part 99 
  - 20 USC 1232g 
- Family Educational Rights and Privacy (FERPA) 
- Family Educational and Privacy Rights 
 X 
34 CFR 361.38 
Protection, Use and Release of Personal Information 
(Special Education and Rehabilitative Services, 
Dept. of Ed.) 
 X 
42 CFR Part 2 
  - Authority: 42 USC 290dd-2 
- Confidentiality of Substance Use Disorder Patient 
Records 
- Confidentiality of Records 
 X 
42 CFR 403.812 
HIPAA Privacy, Security, Administrative Data 
Standards, and National Identifiers 
 X 
42 CFR 431.300-431.307 
Safeguarding Information on Applicants and 
Beneficiaries (Medicaid/medicare) 
 X 
42 CFR 493.1231 
Lab-patient confidentiality 
 X 
45 CFR Part 160 and Subparts A and 
E of Part 164 
 - Note: 42 USC 201 
- Health Insurance Portability and Accountability 
Act (HIPAA) 
- Definitions 
X 
45 CFR 155.260 and 280 
MARS-E 
 X 
5 U.S.C. 552a 
Privacy Act of 1974 
 X 
18 U.S.C. 1030 
Fraud and related activity in connection with 
computers 
 X 
42 U.S.C. 247b-4(a) 
Early Detection, Diagnosis, and Interventions for 
Newborns and Infants with Hearing Loss

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 10 of 19 
 
 
 X 
42 U.S.C. 280e 
National Program of Cancer Registries 
 X 
42 U.S.C. 679 et seq 
Collection of Data Relating to Adoption and Foster 
Care 
 X 
42 U.S.C. 1320b-7 
Income and Eligibility Verification System 
 X 
42 U.S.C. 1396(a)(7)) 
State Plans for Medical Assistance 
 X 
42 U.S.C. 2000aa 
Privacy Protection of 1980 
 X 
42 U.S.C. 5101, et seq. 
Child Abuse Prevention and Treatment and 
Adoption Reform 
 X 
Education Sciences Reform Act of 
2002 
  
 X 
Individuals with Disabilities 
Education Act of 1975 
  
 X 
Internal Revenue Code, Title 26 of 
USC 
  
 X 
IRS Publication 1075 
Tax Information Security Guidelines For Federal, 
State and Local Agencies 
 X 
Office of Management and Budget 
Memorandum M-17-12 (?) 
Preparing for and Responding to a Breach of 
Personally Identifiable Information 
 X 
Pub.L. 107-347 
E-government Act of 2002 
 X 
Public Law No. 100-235 (H.R. 145) Computer Security Act of 1987 
  
ARIZONA STATUTES, 
REGULATIONS AND POLICIES 
  
 X 
P8110 Data Classification Policy 
System security vulnerabilities 
 X 
P8110 Data Classification Policy 
Generated security information 
 X 
P8110 Data Classification Policy 
Information regarding current deployment, 
configuration, or operation of security products or 
controls

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 11 of 19 
 
 
X 
A.R.S. §12-2291, A.R.S. §12-2292, 
A.R.S. §36-445.04, A.R.S. §36-404, 
A.R.S. §36-509, A.R.S. §36-3805 
Medical records 
 
X 
A.R.S. § 15-103(T)  
 
State board of education’s records during an 
investigation of school district financial 
mismanagement  
X 
A.R.S. § 15-107(M) 
 
State board of education’s records during an 
investigation of school district overspending 
X 
A.R.S. § 15-141  
Educational records 
X 
A.R.S. § 15-213 (A)(2)(d)  
School district construction bids  
X 
A.R.S. § 15-241(C)  
School accountability, annual achievement profile  
X 
A.R.S. § 15-241.01(J)  
State board of education’s investigation records 
about management of school district affairs  
X 
A.R.S. § 15-350  
Investigation records of employee immoral or 
unprofessional conduct  
X 
A.R.S. § 15-537(J)  
Certification and Employment of Teachers, teacher 
evaluations  
X 
A.R.S. § 15-551(A)  
Pupil’s name and testimony in disciplinary hearing  
X 
A.R.S. § 15-741(F)  
Student standardized test results requested by 
education agency  
X 
A.R.S. § 15-1042(I)  
Records of student level data  
X 
A.R.S. § 15-1045(A) 
Pupil’s personal information  
X 
A.R.S. § 15-1638(A)  
Non-profit healthcare institution records on an 
individual’s treatment or nongovernmental 
proprietary information  
X 
A.R.S. § 15-1640(A)  
University’s intellectual property or trade secrets, 
historical records and donor records

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 12 of 19 
 
 
X 
A.R.S § 15-1875(R)  
College Savings Plan, personal information of 
account holders and beneficiaries  
X 
A.R.S. § 15-1881(C)  
Fingerprinting form for post-secondary health 
sciences programs  
X 
A.R.S. § 15-1911(H) 
Interstate Commission minutes and documents of 
closed meetings  
X 
A.R.S. §36-135 
Child immunization Data 
X 
A.R.S. §36-133 
Chronic disease information 
X 
A.R.S. §36-664, A.R.S. §36-666 
Communicable disease information 
X 
A.R.S. §36-568.01, A.R.S. §36-
568.02 
Developmental disabilities service records 
X 
A.R.S. §36-2220 
Emergency medical service patient records 
X 
A.R.S. §12-2801, A.R.S. §12-2802 
Genetic testing records 
X 
A.R.S. §36-160 
Home health service records 
X 
A.R.S. §36-756.01 
Midwifery patient records 
X 
A.R.S. §36-2221 
State trauma registry 
X 
A.R.S. §36-727 
Tuberculosis control court hearing information 
X 
A.R.S. §36-342 
Vital Records 
X 
Payment Card Industry Data Security 
Standard (PCI DSS) v3.2.1 
Card Holder Data (CHD) including Primary 
Account Number (PAN), Cardholder Name, 
Expiration Date, and Service Code 
X 
A.R.S. §44-1373 
Credit card, charge card or debit card numbers, 
retirement account numbers, savings, checking or 
securities entitlement account numbers 
X 
A.R.S. §41-1959] 
Child Protective Services records 
X 
A.R.S. §41-619.54 
Criminal history record information

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 13 of 19 
 
 
X 
A.R.S. §41-1750 
Criminal Justice Information 
X 
A.R.S. §41-4273 
Critical Infrastructure/Fuel Facility Reports 
X 
A.R.S. §39-123, A.R.S. §39-124 
Eligible Persons 
X 
Risk Assessment and State Audit 
Record 
Risk Assessment and State Audit Record 
X 
A.R.S. §41-1279.05 
Auditor General Records 
X 
A.R.S. §39-126 
Federal risk assessments of infrastructure 
X 
A.R.S. §41-4172 
Personal Identifying Information (except as 
determined to be public record) 
X 
A.R.S. §44-1373 
Social Security Number 
X 
A.R.S. §42-2001 et al. 
Taxpayer Information State, Federal Tax 
Information (FTI) and other 
X 
A.R.S. § 44-315 
Unclaimed Property Information 
X 
Licensing, Certification, Statistics 
and Investigation Information (of a 
sensitive nature) 
Licensing, Certification, Statistics and Investigation 
Information (of a sensitive nature) 
X 
A.R.S. §36-2161 
Abortion reports 
X 
A.R.S. §36-3503 
Child Death Records 
X 
A.R.S. §36-2523 
Controlled substance records 
X 
A.R.S. §36-2220 
Emergency medical service investigation records 
X 
A.R.S. §41-1482 
Employment discrimination information 
X 
A.R.S. §36-2917 
Health Care Cost Containment Records 
X 
A.R.S. §36-3295 
Health Care Directives Registry Information 
X 
A.R.S. §36-2403, A.R.S. §36-404 
Health care entity licensing information 
X 
A.R.S. §36-2810 
Medical Marijuana Records

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 14 of 19 
 
 
X 
A.R.S. §36-445, A.R.S. §36-445.01 
Medical practice review 
X 
A.R.S. §36-446.10] 
Nursing home certification records 
X 
A.R.S. §36-2604 
Prescription information 
X 
A.R.S. §39-125 
Archaeological discoveries 
X 
A.R.S. §38-507 
Attorney General opinions 
X 
A.R.S. §42-2001 
Tax Examination guidelines 
X 
A.R.S. §41-3452 
Vehicle information 
X 
A.R.S. §41-361 
Attorney-Client Privileged Information 
X 
A.R.S. §6-129 
Bank Records 
X 
Intellectual Property laws 
Trade secrets and proprietary information 
X 
Management and Support 
Information  
Management and Support Information  
X 
Other records protected by law 
Other records protected by law

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 15 of 19 
 
 
APPENDIX B 
 
 
State of Arizona 
Department of Education 
Non-Disclosure Agreement  
 
The Arizona Department of Education (“ADE”) enters into this Non-Disclosure Agreement 
(“Agreement”) with PII Reviewer of Maricopa County Attorney’s Office for Criminal 
Investigations.  
PII Reviewer 
 
Phone Number: 
 
Email Address: 
 
Work Address: 
 
 
A copy of the approved proposal will be kept on file at the ADE. 
By signing below, PII Reviewer, who has access to confidential data, acknowledges and agrees: 
1. That you have received a copy of ADE’s Redaction Rules and will comply with the same;  
2. To abide by the terms of the Data Sharing Agreement “DSA” 
3. That you have completed formal Family Educational Rights and Privacy Act (“FERPA”) 
training through a qualified institution (e.g., https://studentprivacy.ed.gov/training/ferpa-101-
educational-agencies);  
4. To obtain the necessary human subject institutional review board (IRB) approval (if required) 
by your institution or organization before assessing the data shared by ADE per data sharing 
agreement;  
5. To access and use the data shared by ADE per data sharing agreement only for criminal 
investigation; 
6. That you will use the confidential data for only the purpose(s) criminal investigation; 
7. That you will not redisclose the PII in the results of your data analysis. 
8. Not to attempt to identify individuals or publicly release confidential data;

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 16 of 19 
 
 
9. That you understand that you must only access the data shared by ADE per DSA through a 
secure server of your organization; 
10. To ensure that all research conducted and all generated research products (including but not 
limited to papers, abstract, PowerPoint presentations, publication, etc.) using the data sharing 
by ADE are compliant with FERPA, which explicitly means no information will be released 
that could identify individuals; 
11. To ensure that all output using the data shared by ADE are compliant with the ADE Masking 
Guidelines & Techniques; 
12. To never publicly release results or output that has not been approved for release by ADE; 
13. To request the ADE review and approve all research products generated using confidential 
data prior to any public release; 
14. To report, as soon as possible, any known or suspected breach of confidentiality, including 
the removal or inappropriate sharing of data, to the Director or Database Administrator of the 
ADE; 
15. The use of data provided by ADE can be suspended based on any violation of this contract or 
risk of unauthorized disclosure of confidential information; 
By signing this Agreement, PII Reviewer  agrees to comply with applicable ADE and FERPA 
regulations and requirements.  By signing this Agreement, PII Reviewer  further agrees to use 
all information reviewed, observed, or received only for the purposes of the data request and will 
maintain all reviewed, observed, or received information in the strictest confidence. 
 
______________________________  
 
___________ 
PII Reviewer Signature 
 
 
 
Date 
 
Arizona Department of Education  
____________________________________ 
___________  
Margaret Dugan 
 
 
 
 
Date 
Deputy Superintendent 
Arizona Department of Education 
1535 W. Jefferson St. 
Phoenix, AZ 85007

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 17 of 19 
 
 
 
APPENDIX C 
 
CERTIFICATE OF DATA DESTRUCTION 
 
Required of All Projects Receiving Data from the Arizona Department of Education under a 
Written Data Sharing Agreement [insert number] 
 
In accordance with the provisions of the Data Sharing Agreement (DSA) [ or Memorandum of 
Agreement (MOA)] executed on [insert date] and modified on [insert date] between the Arizona 
Department of Education and [insert organization], the data files and all related information 
described below were destroyed as required in Section [insert section] of the Agreement and in 
accordance with the approved Data Destruction Plan. 
 
________________________________ 
Date destruction completed. 
 
Description of records destroyed. 
 
File name 
File description 
Inclusive dates 
covered 
Storage Type 
Insert original 
files and any 
copies made on 
separate lines 
Describe the categories of 
data that will be stored 
within this type (use data 
appendix in MOA for 
reference) 
 
Office Equipment, 
Mobile Devices, 
Paper, External 
Locally Attached 
Hard Drives

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 18 of 19 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Method of destruction 
Storage Type 
Destruction 
Category  
Destruction 
Definition 
Provide details on 
methods 
Office Equipment, 
Mobile Devices, 
Paper, External 
Locally Attached Hard 
Drives 
Clear, Purge, 
Destroy, Other 
Insert relevant 
information from 
Appendix A of 
NIST Guidelines 
Please describe 
specifics of how data 
files were destroyed 
from this media type 
 
 
 
 
 
 
 
 
 
 
 
 
 
We certify that the data files and destruction methods listed comply with all requirements of the 
agreement. 
We certify that all copies of the files listed and described, in all media, and by all individuals 
with access have been destroyed in the manner indicated. 
The person/people signing this document is/are authorized to execute this document on the 
behalf of the requesting party.  
Signed: 
 
 
___________________________________________ 
 
 
 
[Insert name of Principal Investigator] 
 
 
Date 
 
 
____________________________________________ 
[Insert Title of Entity/ person requesting data]

ADE- Maricopa County Attorney’s Office Data Sharing Agreement- Audit & Evaluation 
Agreement Drafted Using Guidance for Reasonable Methods and Written Agreements (ed.gov) 
Nokia BFCM Campaign Execution Planning (raymarshallcenter.org) 
 
Page 19 of 19 
 
 
 
 
Signed: 
 
 
____________________________________________ 
 
 
 
[Insert name of Witness] 
 
 
 
 
Date 
 
 
____________________________________________ 
[Insert title of Witness] 
 
 
 
 
When signed, please submit this certification to datarequestmailbox@azed.gov