Data Privacy & Security Service DPS DIGITAL DIGEST- SUMMER 2020 The Remote Learning Issue
In the Age of Coronavirus Blended Learning Will Be Our New Benchmark
It’s Time to Focus on Cybersecurity and Student Data Privacy Again
Schools had to close abruptly to slow the spread of the coronavirus, districts had to move to a remote learning model in record time to continue instruction. Now that schools have settled into a remote instruction program and are developing instruction plans for the fall, it is time to shift our focus to cybersecurity and data privacy.
The coronavirus pandemic prompted a sudden shift to remote learning in schools across the nation. Some districts have struggled to adapt to remote learning while others were prepared thanks to robust technology programs. Initially the transition to remote learning was viewed as a temporary emergency measure to continue instruction. We now understand remote instruction will be an integral part of a blended learning model for the foreseeable future. Schools will need to adapt instruction to alternate between face-to-face instruction and online instruction as illness may impact attendance for both teachers and students.
How will schools do this?
• By addressing the digital divide and ensuring all students have online access and a device. • Teachers will have to adapt to a new blended model of instruction and embrace a “flipped classroom” approach of student-centered learning. • By modifying assessment criteria and moving away from exam-based grading policies and toward participation and project-based grading policies.
Data Security IT professionals previously focused on network security may now turn their attention to application security. As home devices may not be secured by a firewall or other network security safeguards it is even more crucial to scrutinize the applications that access student data.
Student Privacy and Safety As students work remotely, districts will now work to protect student data privacy more than ever. Students will need protection from cyberbullying and violent threats as they utilize online communication platforms. “Online learning spaces must be secure and closed to unauthorized access—even from parents” under FERPA.
Access this Forbes article to learn more.
Six Ways to Determine if Free Education Apps are Worth the Cost
As everyone rushed to remote instruction educators had to rely more heavily on free online tools to help them deliver digital content to students. Moving forward districts will have to determine if they should continue using these free products and/or if they will pay for products that are no longer free.
Remote Access
Remote classrooms and workspaces make districts more vulnerable to cyberattacks. Monitor district accounts for atypical behavior like “multiple unsuccessful logins; failed multifactor authentication checks; or successful logins from an unapproved location, such as another country.”
Here are 6 ways you can decide if an app stays or goes for your district:
1. Did the educator get approval from your administration to use the app? 2. Is there another application the district has already approved that might work just as well? 3. Does the app integrate with existing district platforms? 4. How does the app handle student data? 5. How long is the free trial? 6. What kind of analytics does the app provide?
Click here to access the full article from District Administration.
Learn more about this decision making process here.
Data Privacy & Security Service, Issue 19
Page 1 Data Privacy & Security Service, Issue 19
Page 2
Videoconferencing
Videoconferencing Dos and Don’ts
Videoconferencing Security is Essential
As we rely on videoconferencing more and more these days, we must be mindful of the security risks associated with using these tools. This helpful article shares tips and tricks to secure your meetings: • Purchase enterprise accounts: Enterprise accounts offer more security features than consumer- grade accounts. • Use the waiting room feature. • Only turn on your video camera when you need to. • Use the latest software version whenever possible. • Eject unwelcome participants. You can prevent participants from rejoining once removed. • Lock a meeting once it is underway. • Don’t record meetings and if you do record, notify participants the meeting is being recorded. • Train staff on video conferencing best privacy and security practices. Click here to access the full article. • Enable password protection for your meetings. • Do not share meeting links on social media. • Do not allow screen sharing for all participants by default.
School districts now rely on videoconferencing platforms to “stay connected with students and collaborate with colleagues.” Using these platforms to provide live instruction is not without risk. “Zoombombing” and other video call interruptions by bad actors have plagued some school districts. In addition, students and staff utilize video conferencing solutions outside of the secure school network, making students and staff even more vulnerable to “malware, identity theft and other security exposures.” Districts need to be aware of possible security and privacy threats and minimize privacy risk. Know what “data vendors are collecting and maintaining” and their purpose for collecting this data. Educators should not record any classes without parental
consent, nor should they require students to be on camera. If a lesson is recorded it cannot be shared online or publicly unless parents have provided consent. As districts will most likely continue to rely on video conferencing platforms, here are some steps they can take to protect users: • Choose a platform that complies with FERPA and Education Law 2-d • Utilize available privacy and security settings and controls • Model and train staff on good cyberhygiene practices Read more here.
Zoom Improves Data Security and Privacy Practices
In earlyMay NewYork State officials came to an agreement with Zoom to address privacy and security issues impacting schools in New York City and nationally. The NYC Department of Education shared an agreement that permitted NYC educators to use Zoom again, lifting the previously imposed “Zoom ban.” In addition, the NY State Attorney General announced Zoom agreed to apply new security and privacy protections for all users. Under this agreement new privacy features were applied to K-12 accounts including: • Required password and waiting room features (by default). • Host control of private chat messages and email directories. • Zoom discontinued user data sharing with Facebook and LinkedIn . Learn more here.
Data Privacy & Security Service, Issue 19
Page 3 Data Privacy & Security Service, Issue 19
Page 4
Remote Learning Resources
Do you know if a photo or a video is an educational record under FERPA? Visit this FAQ on Photos and Videos from Protecting Student Privacy to answer this and other FERPA related questions.
Edtech Company Proposes Remote Learning Student Bill of Rights
ProctorU, an online proctoring solution, has proposed a “student bill of rights” for remote learning with the goal of developing a “level playing field for students as schools continue delivering classes online.” The initiative lists seven expectations or “rights” students should be able to rely on as they learn remotely including: • The right to have questions about digital or remote work responded to “clearly and promptly” • All student work is believed to be completed with “honesty and integrity” unless proved otherwise • The understanding that all parties engaged in remote learning comply with federal and state privacy laws related to student privacy • The right to expect policies and procedures are
in place and are followed to ensure the integrity of student work • The right to review any policies that may provide an unfair advantage if work is completed using “inappropriate or unauthorized tools, tactics or assistance” • The right to know what data is collected, why it is collected, where it is stored and how the data will be used • “The expectation that data collection is specific and limited.” The CEO of ProctorU also points out students should be able to understand the policies and procedures outlined above to help students “make good decisions.” You can visit this dedicatedwebsite to review the proposed Student Bill of Rights and to leave a comment or join the effort.
Thank you for reading the latest issue of the Data Privacy & Security Digital Digest. Contact your Local RIC for additional information on the Data Privacy and Security Initiative (DPS) and to view additional subscription components.
Data Privacy & Security Service, Issue 19
Page 5
Data Privacy & Security Service, Issue 19
Page 6
Page 1 Page 2-3 Page 4-5 Page 6-7Made with FlippingBook Annual report