The Practical Guide to K12 Student Data Privacy

By Bob Moore, RJM Strategies

Just a couple of years back, the issue of student data privacy was hardly mainstream. That’s all changed dramatically due to the many data breaches and controversial programs, such as inBloom, dominating the conversation in education technology media.  At the same time, I think there is now a greater appreciation not only of the potential data privacy risks, but the inherent importance of protecting the privacy of students. Given all of the attention that has been given to the issue of student data privacy, it is not surprising that privacy guidance resources, toolkits and advice have proliferated.

But many of those who must grapple with the student data privacy issue are still confused. The Federal laws seems so intricate and states are barraging schools with even more laws. To make matters more confusing, the all-too-common catch-phrase that schools “need to go beyond compliance” seems to suggest that compliance is easy and that schools need to do more. Yet to most of us, mere compliance seems a daunting task. What’s a district leader to do?

District technology leaders need practical, simply-stated advice and concrete steps that they can take to deal with the privacy issue. That’s where Student Data Privacy Services comes in. They have asked me to write a series of posts for district technology leaders that will help guide them through the privacy maze. In this first of eight posts, I’m providing an overview of coming posts so that readers can have a sense of the larger issue. While a thick tome could likely be written about each issue, my goal is to provide plain-spoken, digestible guidance. You’ll find the same tone in my many analyst reports and blogs found on K12Blueprints.com.

I’ll be drawing upon and referring to many of the good resources that are already available, but it may seem like too much to wade through. Resources such as CoSN’s (Consortium for School Networking) Protecting Privacy in Connected Learning toolkit, the US Department of Education’s Privacy Technical Assistance Center, and K12 Blueprint’s privacy toolkit are great resources, but it is easy to get lost in their intricacies and/or sheer volume. My goal is to simplify to the extent that I can, while still keeping within the spirit of legal requirements. Much like I did in Making Sense of Student Data Privacy. Some may argue that over-simplification is dangerous, but I would counter that it is far better to simplify, while being true to the spirit and intent of the law, than ignore or avoid the law because compliance seems to daunting.

As for the topics I’ll cover in the series, I’ll be looking at the issue from two different perspectives: that of the school district and the service providers. I’m approaching it this way because I believe it is important to understand both perspectives. I’ve worked in both worlds and having both perspectives is critical for issues like privacy. Protecting privacy requires a partnership, or collaboration, and that can only be accomplished by understanding the role of the respective parties.  I’ll start by reviewing some of the legal requirements and legal landscape. Next up will be some of the technical issues, particularly as they apply to data security. Then we’ll take a look at the importance of policies and processes for the respective organizations.

As you read the posts, I hope that you’ll take a moment to comment to let me know if the posts are valuable and if you would like to suggest corrections or clarifications.

My next post, K12 Schools: The Privacy Legal Landscape, covers the basics of student data privacy law that applies to K12 districts.

About the Author

Bob's Practical Privacy Series is sponsored by Student Data Privacy Services. 

Student Data Privacy Services helps districts protect student data privacy by evaluating the business model, privacy policy, privacy practices and technical security of apps and websites used in the districts' classrooms.  

These risks are evaluated across the Seven Privacy Sins™, a holistic model that goes beyond the fear of a data breach or unwanted marketing by evaluating risks within the schools as well as outside the schools.  Student Data Privacy Services is a valued partner to schools, parents and service providers who all have a vested interest in protecting students while online. 

Learn more at studentdataprivacy.com.