The Worcester Central School Board approved a resolution to participate in the RIC One Risk Operations Center (ROC) for the 2026-2027 fiscal year to strengthen vendor management and data security/privacy practices. Through its Regional Information Center, the district will rely on ROC and its attorneys to negotiate Ed Law 2-d–compliant Data Privacy Agreements (DPAs) with software vendors and third‑party contractors handling student PII and APPR data. This participation does not itself spend new funds beyond the existing budget but formalizes a framework under which the district will review and execute DPAs tied to software and technology resources.For vendors, this is a clear signal that any new or renewed EdTech, SIS, assessment, or cloud service contracts must align with ROC/SDPC/TEC-standard DPAs and New York’s data privacy regulations. A practical next step is to engage Worcester’s IT/data privacy contacts and business office to position your solutions as Ed Law 2‑d compliant and already aligned with RIC One ROC template agreements, easing their legal review and approval process.

Resolution explicitly reserves the Board’s right to decide which ROC-negotiated DPAs and related software/technology resources to adopt and to consult its own legal counsel before executing any DPA.