Data Privacy & Security Service Digital Digest_Fall 2018

Data Privacy & Security Service

Fall 2018 (Issue 13)

SOCIAL MEDIA

Data Privacy & Security Service

Issue 13

DIGITAL CITIZENSHIP

Garfield Teaches Digital Citizenship? by Patrick Craven, Director of the Center for Cyber Safety & Education

In This Issue

Yes, you read that right. That fat, lazy, orange cat that we all grew up with has woken from his nap and is available to help teach children grades 1-6 how to be safe and secure online. Thanks to an exclusive partnership between the nonprofit Center for Cyber Safety and Education (Center) and cartoonist Jim Da- vis, kids have access to several innovative and engaging les- sons dealing with online privacy, safe posting, stranger danger, cyberbullying and more. We all know how much time our children spend online these days. Between their phones, tablets and computers, kids never seem to come up for air. The Center surveyed elementary students (grades 4-8) and found that more than half (53 percent) of students spend two hours or more a day online doing things other than homework, and 23 per- cent spend more than four hours a day online! The Children’s In- ternet Usage Study found that 37 percent of the students admitted to being tired at school the next day, while 10 percent said they were late for school from being online too late, and 5 percent missed school altogether! The Internet has changed how children (and people in general) interact with each other. Kids

Page 1: Digital Citizenship • Garfield Teaches Digital Citizenship? Page 2: • Garfield Teaches Digital Citizenship? (cont’d) • Comptroller’s Corner Page 3: CoSN Resources for Ed Tech Leaders • Protecting Student Data Privacy Starts with Lead- ership Page 4: • Protecting Student Data Privacy Starts with Lead- ership (cont’d) • How to craft useful student-centered social media policies • Online Privacy Videos from Common Sense Media Page 5: Cyber Security Best Practices Page 6 : Cyber Security News Page 7 : Cyber Security Tips

Garfield Image © of the Center for Cyber Safety Education online live in a bubble of seclu- sion and anonymity, an existence that comes with little to no under- standing of the consequences of their actions. And this reality doesn’t exist out of spite; for many kids, it is all they know. They make friends online, play online and have conversations online, all of which is okay, and we need to accept it. Heck, some of us met our spouses online, so let’s not be determined to see only the bad side of the Internet. But children need to understand that they can’t do and say what- ever they want online or ignore the consequences of their ac- tions.

Page 1

Data Privacy & Security Service

Issue 13

DIGITAL CITZENSHIP

Garfield Teaches Digital Citizenship? (continued)

It is this kind of information that led the Center to reach out to Jim Davis and enlist the support of Garfield. Together, they have created a series of cartoons, activity books, posters, stickers, trading cards and more to help teach young children safety basics such as not sharing your password, not posting private information and being kind online. Mr. Davis even made a video to help explain the program, which is now available to schools, libraries, media centers, churches, scouts and parents. You can watch the fun, short video at https://youtu.be/vJ8e- 8VDuUq4. To make it even easier for schools to use, they have developed an Educators’

Kit that has all the materials needed for a class or group of 30 students - all in one box with instructions and guides included. A single lesson only takes about 20-30 minutes to complete and produces prov- en results. This past school year, the Center followed 500 students who were using the program and found that their cyber safety knowledge in- creased on average 28 per- cent! With some topics, only 30 percent of the students an- swered the pre-lesson ques- tion correctly, but 90 percent got it right afterwards. The Center has free materi- als to help you jumpstart the conversation, but does offer

the Educator Kits or Digital subscription at cost (they are a nonprofit and just trying to re- coup their expenses). You can learn more about all programs at https://iamcybersafe.org/ school-program/. And make sure you check out the materi- als they have for your parents at https://safeandsecureonline. org/parents-guardians/. There is even a PowerPoint presen- tation that can be used at PTA or upcoming parent meetings. Both Garfield (who turned 40 years old in June) and his Cy- ber Safety Adventures lessons are kid-tested and teacher ap- proved. Make sure you check them out at www.IAmCyber- Safe.org.

COMPTROLLER’S CORNER

NY State Comptroller DiNapoli: Social Media Firms Must Demonstrate They Can Protect Users

New York State Comptroller Thomas P. DiNapoli called on Facebook, Twitter & Alphabet (Google’s Parent Company) to explain how they plan to protect users from fake news, harassment and abuse on their social media platforms. DiNapoli stated his con- cern that these companies are at risk of lawsuits, financial losses and reputational damage if they do not work quickly to address these issues.

Read more from the Comptroller here: NY State Comptroller Calls on Face- book, Twitter and Alphabet (Google) to Enforce Terms of Service, Block Fake News and Harassment CNY Central: NY Comptroller: Social Media must curb harassment, fake news

Page 2

Data Privacy & Security Service

Issue 13

CoSN RESOURCES FOR ED TECH LEADERS Protecting Student Data Privacy Starts with Leadership by Linnette Attai, Project Director for CoSN’s Privacy Initiative & Trusted Learning Environment Program and President, Playwell, LLC

Developing a data privacy governance program is not the job of one person or one team. It is a multi-stakeholder endeavor that requires every- one’s involvement and atten- tion, and no such program can be successful without effective leadership support. In fact, given the importance of the is- sue and the depth and breadth of work that’s required to build a robust student data privacy program, the effort must begin with leadership. Strong leadership brings atten- tion to the issue, establishes the tone, sets the direction and establishes key data protec- tion policies. Leadership is responsible for ensuring that the school system has the re- sources required to build and maintain a strong student data privacy program and that the organization takes a holistic approach to the work. Creating the proper approach to the work takes some plan- ning. Here are some key steps to set your district up for success: • Understand federal and state student data privacy laws and ensure that lead- ership discussions include ongoing consideration for

data privacy and security. Ensure that the leadership team is fluent in the re- quirements so that discus- sions are well-informed and comprehensive. • Prepare and maintain policies that reflect the regulatory requirements for protecting student data privacy. Remember that the policies you set are not a restatement of the laws, but an explanation of the expectations for district employee behavior in align- ment with what the laws require. • Ensure that there are de- fined procedures to accom- pany each policy. Partner with your school system departments to define the expectations for behav- ior in order to ensure that policies are implemented properly, in alignment with the laws and community norms. • Identify an executive-level leader to be responsible for development and imple- mentation of data privacy and security policies and practices. Be sure this person is qualified and has the training, resources and support necessary to do the work.

• Provide transparent, up- dated and accessible information for the commu- nity about how the school system protects the privacy of student data. Consider how you partner with your community to let them know how and why the school system is collecting data, and how it is used and protected. • Ensure that adequate re- sources are available to the school system to properly protect student data. Con- sider whether or not the work of protecting student data is prioritized properly

“Strong leadership brings attention to the issue, establishes the

tone, sets the direction and

establishes key data protection policies.”

in terms of both your atten- tion and budget.

Page 3

Data Privacy & Security Service

Issue 13

CoSN RESOURCES FOR ED TECH LEADERS

Protecting Student Data Privacy Starts with Leadership (continued)

It is important for districts to set up social media guide- lines or policies and assess students’ needs, as well as support social media use in a responsible manner. As there is not a one-size fits all policy, here are a few key elements to incorporate: • Opt-out forms should be For more leadership tips, check out CoSN’s Empowered Super- intendent Program. CoSN also has a variety of other resources to help districts evalu- ate and improve their data priva- cy programs: • The Empowered Superin- tendent Student Data Priva- cy One-Sheet. This quick tip sheet gives you at-a-glance guidance on key leadership requirements. • Protecting Privacy in Con- nected Learning Toolkit. This free resource is an in-depth

specific in addressing social media use and in describing the platforms being used. • Student privacy is para- mount, so guidelines need to restrict location sharing and minimize information and profiles. • Discuss digital footprints with students. ment Seal Program. The Trusted Learning Environ- ment Seal Program (TLE), ensures that school systems are taking meaningful and measurable steps to pro- tect the privacy of student data and are communicating guide to key federal student data privacy laws. It also in- cludes guidance on how the laws operate together, sug- gested contract terms, expla- nations of metadata and data de-identification, use of click- wrap agreements, and more. • Trusted Learning Environ-

• Emphasize social media use with goals for student learning. Placing this policy in the fac- ulty handbook makes it more relevant to classroom instruc- tion. For more on these ideas click this link. these efforts to parents, com- munities and other stake- holders. • Online Privacy Training. This eight-module course is designed for school district leaders who want to under- stand existing privacy laws, define best and necessary practices around privacy, and communicate effectively with their communities. For more information about how CoSN can help support your district efforts across a variety of disciplines, visit CoSN.org.

How to craft useful, student-centered social media policies

Online Privacy Videos from Common Sense Media

Common Sense Media provides great video resources to help students protect their online privacy. Click to learn more about the 6 ways stu- dents can protect their online identities and the 5 Surefire Ways to Protect Your Kid’s Online Privacy. Additional Videos can be found here: https://www.commonsensemedia.org/video

Page 4

Data Privacy & Security Service

Issue 13

CYBER SECURITY BEST PRACTICES

CU researchers launch “cyberbullying detector” program for social media

CU’s Cybersafety Research Center has created a protoype program and app called BullyAlert. It scans and analyzes public social media data for abusive language and incidents of bullying. While only compatable with Instagram; plans to expand are in the works.

Administrators can monitor accounts and will be sent alerts. Bully Alert is free and currently only allows ads for public instagram profiles.

Use this link to learn more.

Ways to Stay Safe When Using Public Wi-Fi

Free public Wi-Fi in hotels, stores, coffee shops etc. sounds like a dream come true, but beware – it is free for hackers too. Follow these steps to protect data and take advantage of “free” Wi-Fi connections: • Confirm the network and the password – ask for an encrypted net- work. • Use your own data (4G connection) if you access something like bank account information, then hop back on the Wi-Fi. • Consider disabling the auto-connect feature.

Click here to read the full article.

The Role of Leadership in Protecting Student Data Privacy

clearly establishing these parameters, you are more likely to achieve your goals. • Make it relevant so there is a buy in. • Clearly state the ramifications of not protect- ing student data. • Provide solutions – be specific in how lead- ership can champion the policy work. Use this link for more information.

A student data privacy compliance program needs the endorsement and understanding of school system leadership to work even if leadership is not involved in the details to truly assess effectiveness. With that said here are some key ideas to keep in mind: • Begin with the end – what do you want your leadership to do and build from this. By

• Maintain Awareness of All Relevant Laws • Know What is Being Used in Your District • Have Policies to Evaluate Proposed Services • Negotiate Written Contract When Possible • Be Honest With Parents & Students on Data Use ISTE 2018: Five Best Practices for Adhering to Federal Privacy Law

Page 5

Data Privacy & Security Service

Issue 13

CYBER SECURITY NEWS October is National Cyber Security Awareness Month!

National Cyber Security Awareness Month (NCSAM) was estab- lished in 2004 by the

Here are the themes for October 2018: Week 1: October 1-5: Make your Home a Hav- en for Online Safety Week 2: October 8-12: Millions of Rewarding Jobs: Educating for a Career in Cybersecurity Week 3: October 15-19: It’s Everyone’s Job to Ensure Online Safety at Work Week 4: October 22-26: Safeguarding the Na- tion’s Critical Infrastructure

U.S. Department of Homeland Security and the National Cy- ber Security Alliance to provide resources that help Americans stay safe and secure online.

Click here to learn more about NCSAM

Google Chrome Marks All HTTP Sites as ‘not secure’

Google released Chrome 68 on July 24, adding a warning for unencrypted HTTP sites. If a site loads as HTTP a “not secure” warning will appear next to the website address bar. Seeing a “not secure” warning does

not mean the site was hacked, it just means the website is not running on the secure version, HTTPS.

Click here to learn more about this update to Google Chrome.

13 Going on Old Enough to Share Your Personal Data

The US government through The Children’s Online Privacy Protection Act or COP- PA has granted children younger than 13 special protections on the Internet since 2000. The main issue is obtaining verifi- able parental consent and the sharing of

information to third parties. Now there is a movement to discuss protections for the 13 to 18-year-old population and the concept of protection for all. To read further click on this link.

Schools Eye Facial Recognition Technology to Boost Security

Lockport School District in western New York is implementing a new surveillance system that incorpo- rates facial recognition technology in an effort to provide better securi- ty in the wake of Parkland, Florida school shooting last February.

This move has spurred an open debate about the balance between security measures and student privacy and civil rights.

To read more use this link.

Page 6

Data Privacy & Security Service

Issue 13

CYBERSECURITY TIPS

Data Privacy & Security Service Digital Digest

For Further Information Contact your Local RIC.

Click here to find your local RIC contact

For Subscribers to the Service: • Digests & Archived Digests • Digital Debrief • Inventory Tool • Information Security Online Professional Development • Digital Blasts

Image © of the the Joy of Tech, joyoftech.com. Permission to reprint granted by Joy of Tech.

Tips for Locking Down Student Data

There are many challenges facing districts when it comes to protecting data but these three threats are at the top of the list to address: • Phishing

This article discusses ways to educate employees about these threats and includes teaching tips to help avoid data security risks. To read more about these security pro-tips and to access a 30-second drill video, use this link.

• Google Drive Tools • Local Data Storage

Page 7

Page 1 Page 2 Page 3 Page 4 Page 5 Page 6 Page 7 Page 8

Made with FlippingBook - Online catalogs