Student Data and Privacy

New York State Education Law 2-D pertains to the unauthorized release of personally identifiable information. 

The Board of Regents adopted Part 121 of the Regulations of the Commissioner of Education on January 13, 2020. These rules will implement Education Law Section 2-d and provide guidance to educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data. The regulation went through multiple sets of revisions and  and went into effect January 2020.  It applies to both charter and traditional public schools. 

For more information regarding EdLaw 2-D, please use the following links:

• NYS Education Law Section 2-d Inventory of Data Elements
• NYS EdLaw 2-D Informational Video

4256.1 INTERNET SAFETY

The Superintendent of Schools, or his or her designee, shall develop and implement procedures that provide for the safety and security of students using electronic mail, chat rooms, and other forms of direct electronic communications; monitoring the online activities of students using School District computers; and restricting student access to materials that are harmful to minors as defined in the Children’s Internet Protection Act...

4526 COMPUTER, NETWORK AND INTERNET ACCEPTABLE USE

The Board of Education believes that providing access to computers is an integral part of a contemporary education. Within financial limitations, computers, computer networks and the internet will be made available to students, faculty and staff.  The technology resources at the School District (e.g., all networking, hardware and software, the Internet, e-mail, telephone equipment, digital still and video, voice mail, fax machines and supporting telephone lines, and all communication equipment) are provided  to support the educational and administrative activities of the School District and should be used for those purposes...

8630 COMPUTER RESOURCES AND DATA MANAGEMENT

The Board of Education recognizes that computers are a powerful and valuable education and research tool and as such are an important part of the instructional program and that it is critical to exercise appropriate control over computer records, including financial, personnel and student information...

8635 INFORMATION SECURITY BREACH AND NOTIFICATION

The Board of Education acknowledges the State’s concern regarding the rise in identity theft and the need for prompt notification when security breaches occur...

• District Software Inventory List

Software (programs/web based applications) used in the District, both free and subscription-based, are vetted for compliance with New York State Education Law-2d.  Links to the software Privacy Policy contains additional information specific to the company's policies.  In addition, where appropriate, we have included supplemental information that further explains the protection of student and staff data.

*Approved Google extensions are based on our approved software inventory list.
Google Chrome extensions are typically created by 3rd party vendors. The majority of extensions are not part of the Google for Education Suite. Google Chrome extensions are from 3rd party vendors and do not fall under our data privacy agreement with Google.
 

• Parents' Bill of Rights for Data Privacy and Security

  • The Herricks Union Free School District is committed to protecting the privacy and security of each and every student’s data. Parents should be aware of the following rights they have concerning their child’s data. Click here to view the entire policy.
     

• 8625 – Privacy and Security For Student, Teacher and Principal Data

  • The Board of Education recognizes its responsibility to enact policies that provide privacy for student, teacher and principal data in accordance with law. This is particularly relevant in the context of the administration of student data which is collected, surveys that collect personal information, the disclosure of personal information for marketing purposes and in conducting physical exams. Click here to view the entire policy.
     

• NYSED Data Security and Privacy Policy

  • This policy addresses NYS Education Department’s (the Department or SED) responsibility to adopt appropriate administrative, technical and physical safeguards and controls to protect and maintain the confidentiality, integrity and availability of its data, data systems and information technology resources. Click here to view additional information.

Family Educational Rights and Privacy Act (FERPA) – The foundational federal law on the privacy of students’ educational records, FERPA safeguards student privacy by limiting who may access student records, specifying for what purpose they may access those records, and detailing what rules they have to follow when accessing the data.

Protection of Pupil Rights Amendment (PPRA) – PPRA defines the rules states and school districts must follow when administering tools like surveys, analysis, and evaluations funded by the US Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies in place regarding how the data collected through these tools can be used.

Children's Online Privacy Protection Rule (COPPA) – COPPA imposes certain requirements on operators of websites, games, mobile apps or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.\

Source: NYSED.gov

Notification of Rights Under the Family Educational Rights and Privacy Act

This is to advise you of your rights with respect to the school records relating to (your son) (your daughter) (you) pursuant to the Federal “Family Educational Rights and Privacy Act of 1974.”

Parents of a student under 18, or a student 18 or older, have a right to inspect and review any and all official records, files, and data directly related to their children, including all material that is incorporated into each student’s cumulative record folder, and intended for school use or to be available to parties outside the school or school system, and specifically including, but not necessarily limited to, identifying data, academic work completed, level of achievement (grades, standardized achievement test scores), attendance data, scores on standardized intelligence, aptitude, and psychological tests, interest inventory results, health data, family background information, teacher or counselor ratings and observations, and verified reports of serious or recurrent behavior patterns. 

Please click here to view the entire notification.