Privacy & Security

District Officials Sort Through Complicated Privacy Landscape

By Sean Cavanagh — March 20, 2014 3 min read
  • Save to favorites
  • Print


School officials face a seemingly mazelike set of challenges in attempting to protect student data, particularly as the technology that they increasingly rely on—apps, devices, programs, software, and the like—evolves in ways they cannot predict, and in some cases, in ways they may barely understand.

The complexity of the student-data landscape, and how district officials can realistically manage it, was a theme during a panel discussion earlier this week at the Washington Education Technology Policy Summit, which offered not only a legal breakdown, but also an on-the-ground look at how privacy laws apply to schools.

Four panelists took on the issue, and fielded questions from the audience: Paige Kowalski, the director of state policy and advocacy for the Data Quality Campaign; Steve Winnick, a senior counsel for the consulting group Education Counsel, LLC; Rich Contartesi, the assistant superintendent for technology services at the Loudon County schools, in Virginia; and Joseph Wender, a senior policy adviser to U.S. Sen. Ed Markey, a Massachusetts Democrat.

One consistent bit of advice offered by the panelists to distirct officials—there were several K-12 administrators in the audience—was that they be as transparent with parents as possible about the companies that have access to student data, about restrictions on how that data can be used (while also making clear how critical data can be to district functions), and, when there’s a breach, about offering a clear explanation to parents of what happened.

The message to concerned parents should be “what do you guys want to see?” Kowalski said. Because “in the absence of information, they’re going to believe the what-if fears?”

Even so, the difficulty that district officials face are obvious, as evidenced by the questions that emerged from district officials and others at the forum. Among the biggest challenges:

  • Explaining data privacy to parents.

Tranparency is one thing. But as one district official in the audience noted, “I have 40,000 students,” which means working with 100,000 or so parents and guardians.

“They all come to me and ask for the data third parties collect,” he said. “It can become very overwhelming.”

In some cases, parents’ concerns about student privacy may not get transmitted to administrators directly.

Contartesi’s district recently had a security breach, which he said officials learned about from a newspaper, which had been called by a parent who had been alerted to it. The Loudon County official said the breach came about when a company hired by the district to do security testing let some student information slip out—information that Contartesi said did not reveal the most sensitive student information, but was troubling, nonetheless.

  • Regulating not only data, but the work of district staff.

Panelists and members of the audience noted that some education apps today get marketed to directly to teachers. Those teachers, in turn, may be signing up students to participate in those apps, which could be marketing to children.

That sort of well-intentioned but risky instructional activity is probably commonplace, Contartesi said. In Loudon County, district officials try to encourage teachers to route those goals through the technology department. Otherwise, “we don’t really know who that vendor is.”

  • Figuring out who owns the data.

A district official from Louisiana recounted the state’s recent decision to remove data from inBloom, after parents raised concerns about the protection of student information through the company. (InBloom officials have said those concerns are misguided.)

In that case, the “state took the data and gave it to someone else,” the district official told the audience. “Our position is that the parents own it...and without parents’ permission, it can’t be given away.”

What does the law say? A primary statute meant to protect student privacy, the Family Educational Rights and Privacy Act, does not specifically use the term “ownership,” said Winnick, of Education Counsel. But a solid legal case, he said, can be made that the data belongs to the district, and to parents.

But Winnick, in a later e-mail to Education Week, also clarified that state education officials also have authority under FERPA to obtain student data and use if for myriad evaluation, audit, and compliance pursposes, and designate an “authorized respresentative” like a technology company, to help them with this work. That process is subject to safeguards under FERPA, he said. Under FERPA, he added, a school district does not have the legal right to veto a state’s decision to go forward with that process, though it’s possible that legal disputes could emerge if local school systems declined to provide data to the state.

A version of this news article first appeared in the Digital Education blog.

Commenting has been disabled on effective Sept. 8. Please visit our FAQ section for more details. To get in touch with us visit our contact page, follow us on social media, or submit a Letter to the Editor.


This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Teaching Webinar
What’s Next for Teaching and Learning? Key Trends for the New School Year
The past 18 months changed the face of education forever, leaving teachers, students, and families to adapt to unprecedented challenges in teaching and learning. As we enter the third school year affected by the pandemic—and
Content provided by Instructure
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Curriculum Webinar
How Data and Digital Curriculum Can Drive Personalized Instruction
As we return from an abnormal year, it’s an educator’s top priority to make sure the lessons learned under adversity positively impact students during the new school year. Digital curriculum has emerged from the pandemic
Content provided by Kiddom
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Equity & Diversity Webinar
Leadership for Racial Equity in Schools and Beyond
While the COVID-19 pandemic continues to reveal systemic racial disparities in educational opportunity, there are revelations to which we can and must respond. Through conscientious efforts, using an intentional focus on race, school leaders can
Content provided by Corwin

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

Privacy & Security Spotlight Spotlight on Lessons Learned: Digital Safety
In this Spotlight, review ways you should be approaching student and system data, discover how others teach digital safety, and more.
Privacy & Security Quiz Quiz: How Much Do You Know About Protecting Students During Remote Learning?
Quiz Yourself: What should you know about storing video content involving students?
Privacy & Security Spotlight Spotlight: Online Student Safety
In this Spotlight, assess possible digital vulnerabilities, learn how students may be partaking in digital self-harm, and more.
Privacy & Security Hackers Post 26,000 Broward School Files Online After District Doesn't Pay Ransom
Hackers who demanded up to $40 million from the Broward School District have now published nearly 26,000 files stolen from district servers.
Scott Travis, South Florida Sun-Sentinel
3 min read
Image shows a glowing futuristic background with lock on digital integrated circuit.
iStock/Getty Images Plus