Data Privacy & Security

New York State Education Law 2-D
Pertains to the unauthorized release of personally identifiable information. 

The Board of Regents adopted Part 121 of the Regulations of the Commissioner of Education on January 13, 2020. These rules will implement Education Law Section 2-d and guide educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data. The regulation went through multiple revisions and three rounds of public comments and will go into effect on January 29, 2020.  It will apply to both charter and traditional public schools. We thank the members of the Data Privacy Advisory Council, implementation planning and drafting workgroups that supported the Department’s Chief Privacy Officer, Louise DeCandia, through this process

NYS Education Law Section 2-d Inventory of Data Elements

PARENTS' BILL OF RIGHTS FOR DATA PRIVACY FOR DATA PRIVACY AND SECURITY
The Westbury Union Free School District is committed to protecting the privacy and security of each student’s data. Parents should be aware of the following rights they have concerning their child’s data.

NYSED DATA SECURITY AND PRIVACY POLICY
This policy addresses the New York State Education Department’s responsibility to adopt appropriate administrative, technical, and physical safeguards and controls to protect and maintain the confidentiality, integrity, and availability of its data, data systems, and information technology resources.

SUPPLEMENTAL INFORMATION

Board Policies
5500 - Student Records
8635 - Information Security Breach and Notification
8635-R - Information Security Breach and Notification

FEDERAL LAWS THAT PROTECT STUDENTS

Family Educational Rights and Privacy Act (FERPA) – The foundational federal law on the privacy of student’s educational records, FERPA safeguards student privacy by limiting who may access student records, specifying for what purpose they may access those records, and detailing what rules they have to follow when accessing the data.

Protection of Pupil Rights Amendment (PPRA) – PPRA defines the rules state and school districts must follow when administering tools like surveys, analysis, and evaluations funded by the US Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies regarding how the data collected through these tools can be used.

Children's Online Privacy Protection Rule (COPPA) – COPPA imposes specific requirements on operators of websites, games, mobile apps, or online services directed to children under 13 years of age and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.

FILING A COMPLAINT UNDER FERPA - If you believe your rights have been violated under the Family Educational Rights and Privacy Act (FERPA) or the Protection of Pupil Rights Amendment (PPRA), please review the videos and instructions in the link to learn how to file a complaint with the Student Privacy Policy Office (SPPO).  While the videos are specific to FERPA complaints, a similar process applies to PPRA complaints.

FERPA NOTIFICATION FOR PARENTS LETTER - The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

Source: NYSED.gov

Parents have the right to file complaints about possible breaches of student data. Parents may submit a complaint regarding a potential breach by the District to:

Scott VanKurin
Director of Instructional Technology
2 Hitchcock Lane
Old Westbury, NY 11550

The School District shall promptly acknowledge any complaints received and investigate the complaint while taking the necessary precautions to protect personally identifiable information. The School District shall provide a response detailing its findings from the investigation at most sixty (60) days after receipt of the complaint. Complaints about the State Education Department or one of its third-party vendors should be directed in writing to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234, or email to privacy@nysed.gov, or by telephone at 518-474-0937.

NYSED Data Privacy and Security

The Board of Regents adopted Part 121 of the Regulations of the Commissioner of Education on January 13, 2020. These rules will implement Education Law Section 2-d and guide educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data. The regulation underwent multiple revisions and three rounds of public comments and will go into effect on January 29, 2020.  It will apply to both charter and traditional public schools. We thank the members of the Data Privacy Advisory Council implementation planning and drafting workgroups that supported the Department’s Chief Privacy Officer, Temitope Akinyemi, through this process.

PARENT RESOURCES

Tips For Parents - An article from the National Cybersecurity Alliance that contains tips for parents on raising privacy-savvy kids.

Common Sense Kids Action - Common Sense is the nation's leading nonprofit organization dedicated to improving the lives of all kids and families by providing the trustworthy information, education, and independent voice they need to thrive in the 21st century.

Common Sense Media - Common Sense is the nation's leading nonprofit organization dedicated to improving the lives of all kids and families by providing the trustworthy information, education, and independent voice they need to thrive in the 21st century.

Online Privacy and Safety Resources - Online privacy and safety resources from NYSED

Parent Fact Sheet - Parent fact sheets from NYSED

StaySafeOnline - National Cybersecurity Alliance: Learn how to protect yourself, your family, and your devices with these tips and resources.

STOP.THINK.CONNECT. PARENT AND EDUCATOR RESOURCES

CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY

You probably ask questions when your child wants to visit a new friend’s house. Who else is going? Will the parents be home? We should have the same discussion with our kids about their Internet use. Which websites are okay to visit? What kind of information is acceptable—and more importantly, what is not—to share online? Below, find resources and materials to help you start the discussion with your kids or students.