illinois cto summit 15 presentation - privacy and security - stan gorbatkin

4
Contract & EULA Terms – Key Issues Indemnification Ending Use of Service/Product Venue for Disputes What Data is being Shared Others?? Strategies Use of District Non-Disclosure Agreement Legal Review of Vendor Terms & Conditions Setting Expectations and Non-Negotiables Resources U.S. Department of Education/ Privacy Technical Assistance Center - http ://ptac.ed.gov/ CoSN - K-12 Privacy Toolkit for School Leaders Protecting Student Privacy While Using Online Educational Services IPSD 204 - Data Privacy Strategies - June 22, 2015

Upload: erepublic

Post on 16-Dec-2015

8 views

Category:

Documents


0 download

DESCRIPTION

Illinois CTO Summit 15 Presentation - Privacy and Security by Stan Gorbatkin

TRANSCRIPT

  • Contract & EULA Terms Key Issues Indemnification Ending Use of Service/Product Venue for Disputes What Data is being Shared Others??

    Strategies Use of District Non-Disclosure Agreement Legal Review of Vendor Terms & Conditions Setting Expectations and Non-Negotiables

    Resources U.S. Department of Education/ Privacy Technical Assistance Center - http://ptac.ed.gov/

    CoSN - K-12 Privacy Toolkit for School Leaders

    Protecting Student Privacy While Using Online Educational Services

    IPSD 204 - Data Privacy Strategies - June 22, 2015

  • What about free Online Resources used by Teachers?

    Considerations:

    Age of Students

    What information being shared?

    Is parent consent required?

    When is it appropriate for a teacher/school official to give consent?

    Protecting Student Privacy While Using Online Educational Services

    IPSD 204 - Data Privacy Strategies - June 22, 2015

  • Protecting Student Privacy While Using Online Educational Services

    Are you using Online Educational Services with your students?

    Did you know there are laws and guidelines which are designed to protect student privacy? Family Educational Rights and Privacy Act (FERPA): http://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html

    FERPA is a Federal law that protects the privacy of student education records. FERPA is a federal law that gives parents: 1) The right to inspect and review the student's education records maintained by the school; 2) The right to request that a school amend the students education records; 3) The right to consent in writing to the disclosure of personally identifiable information from the student's education record, except under certain permitted situations; 4) The right to file a complaint with the Family Policy Compliance Office (FPCO) regarding an alleged violation under FERPA.

    Children's Online Privacy Protection Act (COPPA): http://www.coppa.org/comply.htm The Children's Online Privacy Protection Act and Rule apply to individually identifiable information

    about a child that is collected online, such as full name, home address, email address, telephone number or any other information that would allow someone to identify or contact the child. The Act and Rule also cover other types of information -- for example, hobbies, interests and information collected through cookies or other types of tracking mechanisms -- when they are tied to individually identifiable information.

    Draft Staff Training Slide (1 of 2)

    IPSD 204 - Data Privacy Strategies - June 22, 2015

  • Caution must be taken when student Personally Identifiable Information (PIA) is entered online. Per COPPA, there are numerous protections and requirements specific to students under the age of 13.

    If you are only using District-controlled systems such as Google Apps for Education or eSchoolPLUS, no further approvals are necessary.

    If you are using other online resources necessitating the entry of student information, approval at the building level may be necessary.

    See this link for additional information in progress

    Protecting Student Privacy While Using Online Educational ServicesDraft Staff Training Slide (2 of 2)

    IPSD 204 - Data Privacy Strategies - June 22, 2015