A teacher just asked you to approve an app. What do you do?
A third-grade teacher wants to use a reading app starting Monday. You have a stack of other requests. Here is the decision tree, step by step.
Check the SDPC Registry first
Go to the SDPC Resource Registry and search for the vendor. If a signed agreement already exists for your state, you may be able to adopt it via Exhibit E without negotiating from scratch. This is the fastest path to yes.
If found: jump to Step 4. If not: continue to Step 2.
Ask the vendor for their DPA
Email the vendor and ask for their current NDPA or DPA template. A vendor that does not have one, or takes more than a few days to produce it, is telling you something. Note the response time. You will need it later.
No DPA = no approval. This is not negotiable under Utah Code 53E-9.
Review the DPA for red flags
Open the agreement. Check four things immediately: (1) Does it prohibit targeted advertising? (2) Does it list all subprocessors? (3) Is there a breach notification clause with a timeline? (4) Is Exhibit B (student data schedule) filled out specifically, not generically?
Missing any of these is a negotiation point, not a dealbreaker by itself. But document what is missing.
Execute the agreement
Sign, date, and file the agreement. Upload it to your district's agreement tracker. Submit it to the SDPC Registry if your state Alliance requires it. Set a calendar reminder for 90 days before the expiration date.
Tell the teacher yes
Email the teacher with the approval and the effective date. Keep the reply short. They do not need the legal background. They need to know they can use the app, when, and that their students are covered.
This is the whole point. You said yes. Fast. With a paper trail.