Texas HB 2689 (2019 | TX) would set a standard that all public schools should have a liaison that can communicate data security/cyber security issues with their local communities.
Category Archives: education data
Lege TREND. Facial Recognition Software & Public Education.
State : New York
Legislation: AB 6787 (2019 | NY)
What does this bill do?
- Prohibit schools from using biometric software for 1 year
- Study the use and safety of biometric identifying software
- Make recommendations for the use of biometric software to further school safety
Lockport Union Sun Journal | Bill calls for study of facial recognition systems in schools
Regulatory TREND. State Agency Data Security Requirements for Student DATA. Civil Liability Education Vendors.
New York Department of Education is proposing new rules that will:
- Parent’s Bill of Rights applicable to 3rd party vendors and setting standards on disclosing student data
- The National Institute for Standards and Technology Cybersecurity Framework (“NIST CSF”)
- Annual training for school district employees
- A Data Protection Officer in every school
- Notice of a school data breach must be given to the Department of Education within 10 days
- Civil Penalties that accrue per individual affected…
2019 Student Data Security State Standings. Legislative Trends.
What entity is ranking states on student data protection? Parent Coalition for Student Privacy
Best State for student Data Protection? Colorado with a B
Worst states for student data protection? 11 way tie with Fs for Alabama, Alaska, Massachusetts, Minnesota, Montana, Mississippi, New Jersey, New Mexico, South Carolina, Vermont, Wisconsin
The populous states?
- California C
- New York B-
- Illinois C+
- Texas D+
- Florida D+
- Pennsylvania D-
Lingering Education Data Security Issue for all…
Lege TREND. State passes Equifax Fix. State Attorney General Proposes More Fixes. 2 Key Points.
In 2018, Vermont passed a data breach notification bill to address the Equifax data breach.
Vermont’s Attorney General is Recommending the following additional legislative fixes:
- Create a new statewide office, Chief Privacy Officer, charged with ensuring the state establishes best practices for handling Vermonters’ personal information
- the position would advocate for additional privacy protections for citizens & hear concerns
- Stronger protections for student data by educational…
5 Reasons Schools Must Tackle Cyber Security.
- Libaility for the school, the school distric,t the principal, and the superintendent
- Legal requirements schools retain records like, HIPPA records, that has certian legal requirements
- Disruptions to Education When a school is subject to a hack, it can suspend learning
- Student Records. A cyber event may not only want to steal information, it may want to change information. Integrity of school records is crucial
- Reputation of the school, its educational system, and its leadership
Lege Trend. Tying Funding to CyberSecurity. 3 Points to Watch Out for in Legislation. Hello 3rd party providers.
The federal govenrment has tied Title IV Funding to data security, here’s the key standards that could be replicated by states:
- Universities will be required to have “reasonable safeguards” to data breaches
- Universities will beed an estblished response plan
- Universities will need to oversee 3rd party service providers
Without these requirements, univeristies lose funding.
Business TREND. 5 Types of Public Education student data that can be collected
- Student identity data: Demographic and biometric information
- User interaction data: Engagement metrics for educational content
- Inferred content data: Data concerning how instructional material improves student proficiency
- System-wide data: Administrative data about students, including attendance, disciplinary records and overall academic performance.
- Inferred student data: Inferences based on teacher, content & student data that can be used to make predictions about student outcomes.
4 Ways Public Education Can Address Data Security
- On campus surveillance
- Password policies
- Educating school staff and administration on cybersecurity practices
- Track school owned devices
Ed Scoop | Four approaches K-12 IT directors can take to address security threats
3 TakeAways. Education Vendors + Data Security = The Bill that Set Public Education Contract Policy in the Mountain Laurel State
State: Connecticut
The Data Security for Education Contracts Bill: 2016’s H.B. No. 5469
3 Takeaways for Education Vendors:
- All vendors need written data privacy agreements
- All means all from yearbook publishers to niche apps to Google
- 2 Policy Goals the state wanted to meet:
- Protect students from targeted advertising
- Require notification of data breaches
- The unintended consequence: Each data privacy contract is required by each school district which led to a lot of legal fees for…