Data Privacy Officer
Mr. Theodore Sill, School Business Executive
Family Educational Rights and Privacy Act
Parent’s Bill of Rights
A Parents’ Bill of Rights for Data Privacy and Security must be published on the website of each educational agency and must be included with every contract an educational agency enters into with a third-party contractor that receives personally identifiable information. The list below highlights required elements that must be included in the Parents’ Bill of Rights. To learn more about this requirement, agencies can review Part 121.3 of the Regulations and Section 3 of Education Law 2-d.
The Au Sable Valley Central School is committed to ensuring student privacy in accordance with local, state and federal regulations and district policies. To this end and pursuant to the U.S. Department of Education (DOE) regulations (Education Law Section 2-d), the district is providing the following Parents’ Bill of Rights for Data Privacy and Security:
Part 121 of the Commissioner’s Regulations requires agencies to adopt a policy on data security and privacy by October 1, 2020.1 Additionally, the law requires agencies to publish the policy on the district’s website. To learn more about this requirement, review Part 121.5 of the Regulations.
Personally Identifiable Information (PII)
Education Law Section 2-d and Part 121 of the Commissioner’s Regulations outline requirements for educational agencies and their third-party contractors to strengthen data privacy and security in order to protect student and annual professional performance review personally identifiable information.
Protected Student Data
The term “student” refers to any person attending or seeking to enroll in an educational agency, and the term “personally identifiable information” (“PII”) uses the definition provided in FERPA.
The term PII includes, but is not limited to:
- Student Name
- Date of Birth
- Parent Names
- Video of Students
- Student Email Address
- Student Address
- Student ID Number
- Social Security Number
- Student Medical Information
- Special Education Information
- Other Indirect Identifiers
- Information that alone or in combination would allow a reasonable person to identify the student.
Teacher and Principal Data
Personally identifiable information from the records of an educational agency relating to the annual professional performance reviews of classroom teachers or principals that is confidential and not subject to release under the provisions of Education Law §3012-c and §3012-d is subject to Education Law 2-d.
Third-Party Vendor List
Below is a spreadsheet of software and vendors separated by tabs into those compliant with signed agreements included, those in process, and those found non-compliant: