Category Archives: education data

Student Data Bill in the West. Lowers Privacy. Moves Privacy to Schools.

State: California

The student data security bill:  Removes schools from the  California Electronic Communications Privacy Act

Where would student daat security responsibility lie? each school district

The profferred reasons why: Cyber bullying, schools need access to student electronic use

Record Bee | Bill would strip privacy protections from students and teachers

California’s AB 165 (2017)

Student Records Data Breach Prompts Legislation in Old Line State

The state: Maryland

The data breach: Student records, including names, brthdates and Social Security numbers in Frederick County Public Schools

Why legislation was triggered? 

  • A state senator didn’t think he was getting enough answers from education officials
  • An April 2015 audit called for increased data security measures for student data

The legislative proposal: 

  • Requiring up to 5 years of identity and credit monitoring for data breach victims
  • Not require schools to transfer…

Protecting Education Data. Consider this 3rd Party Education Vendor Experience in Chicago

What data was shared? Chicago Public Schools improperly shared student information that led to direct advertising by a Charter School. 

How did a 3rd party gain access to public school data? A school employee willingly shared it with the Charter School.

SC Media | Chicago Public School data improperly shared

Top 5 Data Security Risks for Public Schools. Bonjour Procurement Contracts.

Who identified the public education data security risks? Missouri State Auditor 

Was the auditor acting under a special audit program? The Cyber Aware School audits initiative

What 5 data security risks did the MO auditor identify?

  • Data management programs are not fully utilized to ensure senstive data is available to those who need the data but maintains privacy
  • Account management. Need policies and procedures for authorizing, reviewing and removing user access
  • Security…

Student Data Breach in Texas. 4 Pieces Informed Intel.

  • Katy ISD experienced a data breach
  • The data breach came  by way of a third party vendor breach that exposed Katy ISD student data
  • The data breached was on a secure server and included:
    • student names
    • birthdates
    • social security numbers/state ID numbers
    • email addresses
    • zip codes
  • The 3rd party vendor will offer identification monitoring to impacted students

KHOU | Katy ISD notifies parents of potential data breach of students’ info

Houston Chronicle | Katy ISD warns staff,…

Schools Access Kids Private Data. No Parental Consent. 3 Points of Informed Intel.

Scenario: School provides kid laptop/ipad. Kid uses laptop/ipad for school work and personal use.  School learns kid likes to watch YouTube at 3am and sleeps in class.

How can schools track students:

  • schools can access what programs/websites kids use
  • schools can access where the kids were when they used the laptop/ipad
  • some schools remotely monitor students through cameras on the devices

Are 3rd parties involved to monitor kids activity on school laptops/ipads? yes & they flag…

4 Recommendations for Protecting Student Data. Pay to Arm Yourself with IT Information. Stop being stingy.

Who is recommending student data protections?  A report from new report on data privacy from the Southern Regional Education Board

What are the 4 recommendations?

  • Clear & transparent state data governance policies. Make the policies easy to find for parents.
    • Print the policies out and pin them to parents at orientation
  • Fund & improve student data security
    • Stop being so stingy
  • Train the people who handle student data
    • Teach the teachers
  • Fund IT support at schools
    • Again, stop…

Case Study. Small School District. New Data Security Protocols. 3 Takeaways including Procurement.

Biggest data security concern: 3rd party vendors. Especially free web based vendors.

The school district’s solution: Training teachers and staff about data privacy standards

The contracting change the district made: Standard privacy clauses that do not shift privacy liability to the school district

EdScoop | Small Missouri school district thinks big about privacy and security