Parents' Bill of Rights for Data Privacy & Security

 

PARENTS’ BILL OF RIGHTS FOR DATA SECURITY
AND PRIVACY

Under federal and New York State law and regulations, Parents and Guardians are entitled to certain protections of their student’s data.

You have the following rights:

1. Your child's data is prohibited from being sold. It cannot be used for any commercial or marketing purpose. It cannot be shared with an unauthorized person.

1. You have the right to inspect and review the contents of your child's education records from their school. You have the right to see the records within 45 days and to dispute any inaccuracies.

1. Your child’s data must be protected using high standards and best practices. Some of these practices include encryption, firewalls, and passwords to protect student data.
2. You have the right to file a complaint regarding a breach and have it addressed within 60 days. You should first attempt to resolve the complaint with your school district.

Michael Newman, Data Protection Officer

Gananda Central School District

1500 Dayspring Ridge

Walworth, New York 14568

[email protected]

If you are unable to resolve the complaint at the school level, you may file a complaint with the New York State Education Department at:

Chief Privacy Officer

New York State Education Department 89

Washington Avenue. Room 152EB

Albany, New York 12234

[email protected]

1. You can get a list of all data elements collected by the State at: https://www.nysed.gov/data-privacy-security/student-data-inventory or by writing to:

Office of Information & Reporting Services

New York State Education Department, Room 863 EBA

89 Washington Avenue

Albany, New York 12234

1. You must receive an annual notice of your rights to inspect and review your child’s education record from your district.

In addition to your rights as a parent, schools have many obligations regarding student data including, but not limited to: a requirement to publish the Parents’ Bill of Rights on their website; to tell you within 60 calendar days, if your child’s data has been breached; to publish on their website supplemental information regarding the third party contractors the school is sharing student data with; and to address using minimal data, data deletion and data protection when sharing student data with third party contractors.

See attached:

Privacy Terms for Parents

Guidance to Educational Agency Leaders on Parents’ Bill of Rights Implementation