Data Privacy & Security Digital Digest_Spring 2020

DPS COVID-19 Response

DPS District Spotlight Irvington School District’s Data Privacy & Security Page

Visitors do not need to navigate away from Irvington’s Data Privacy and Security page to scroll through Irvington’s supplemental information product listing, a very convenient feature. Irvington School District’s Data Privacy and Security page is an exemplary example of how a school district can meet the Part 121 Bill of Rights Supplemental Information requirement with creativity and transparency.

Irvington School District has created a Data Privacy and Security Page on their website that shares information with the school community on Data Privacy under Education Law 2-d and on the RIC One Data Privacy and Security Initiative. In addition, Irvington School District has embedded their Bill of Rights Supplemental Information page from the DPS Inventory Tool into their Data Privacy and Security page, which is pretty cool. helpful resource on third-party contractor requirements under Education Law 2-d developed by Linnette Attai of Playwell, LLC and the Future of Privacy Forum. This three page guide addresses compliance, data protection, key requirements for third-party contractors and enforcement penalties. Use this link to view this helpful resource.

Hours of Cybersecurity

On-Line Courses Available through FedVTE Environment (FedVTE) now “provides free online cybersecurity training to federal, state, local, tribal, and territorial government employees, federal contractors, and US military veterans. The Federal Virtual Training There are “hundreds of hours of cybersecurity on-demand courses” to choose from. Visit fedvte. usalearning.gov to view the course catalog, to create an account, or to access free FedVTE and CISA courses.

As teachers, students, and school leaders continue towork remotely, questions have arisen about student data privacy and security related to compliance with Ed Law 2-d and Part 121 of the Commissioner’s Regulations. RIC One, the 12 Regional Information Centers working together, have created a COVID-19 Response page to address these questions and to provide a comprehensive set of resources. There are also some resources related to digital hygiene that can be used with staff. For more information regarding Education Law 2-d and instructional continuity planning, please contact your local RIC.

Ed Law 2-d Third-Party Contract FAQ

Resource: “NY Education Law 2-d: Third Party Contractor Requirements at a Glance” Ferpa Sherpa has posted a

Schools may be adopting new software products to effectively deliver remote instruction. Use this FAQ to help determine if a new product is Ed Law 2-d compliant. We also recommend consulting with legal counsel. Q: How do I know if a software product is subject to Ed Law 2-d? A software product that does not collect any personally identifiable information (PII) for students, or any teacher or principal APPR data, is not subject to Ed Law 2-d. If a software product does collect student PII and/or teacher or principal APPR data, the product is subject to this law even if the product is free. Q: If a product does collect student PII and/or teacher and principal APPR data, how do I know the software product is Ed Law 2-d compliant? Software products that collect PII are only Ed Law 2-d compliant when the vendor signs an Ed Law 2-d privacy agreement and provides supplemental product information. Q: Is a product Ed Law 2-d compliant if the vendor privacy policy lists acceptable privacy practices? Unfortunately, the answer is no. It doesn’t matter how good the public privacy policy looks or how exemplary a vendor’s privacy practices appear to be. Unless the vendor signs an Ed Law 2-d privacy agreement with a BOCES or district the product is not considered to be Ed Law 2-d compliant.

Thank you for reading the latest issue of the Data Privacy & Security Digital Digest. Contact your Local RIC for additional information on the Data Privacy and Security Initiative (DPS) and to view additional subscription components.

Data Privacy & Security Service, Issue 18

Page 5

Data Privacy & Security Service, Issue 18

Page 6

Made with FlippingBook - professional solution for displaying marketing and sales documents online