New York State Education Law § 2-d went into effect in April 2014. The law focused on the privacy and security of personally identifiable information (PII) of students, classroom teachers, and principals.

New regulations reiterate that education agencies must publish a parent’s bill of rights for data privacy and security as required by the current Education Law 2-d. In addition, the parent’s bill of rights must be included with every contract with a third-party contractor that receives PII.

The Shoreham-Wading River Central School District oversees a wide range of information about students. The district manages personally identifiable information (PII) about students in accordance with the federal laws known as FERPA and COPPA. More information regarding federal and state laws, district policies and guidelines that address technology and student data privacy are listed below.

• Computer Use in Instruction (or Acceptable Use Policy)
• Computer Use in Instruction Regulation
• Information and Data Privacy, Security, Breach and Notification
• Computer Resources and Data Management

• NYS Ed Law 2d
• Part 121 of the Regulations of the Commissioner of Education
• NYSED Data Privacy & Security
• Strengthening Student Data Privacy: Fact Sheet for Parents

• Family Educational Rights and Privacy Act (FERPA)

  The foundational federal law on the privacy of students’ educational records, FERPA safeguards student privacy by limiting who may access student records, specificizing for what purpose they may access those records, and detailing what rules they must follow when accessing the data.

• Protection of Pupil Rights Amendment (PPRA)

  PPRA defines the rules states and school districts must follow when administering tools like surveys, analysis, and evaluations funded by the US Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies in place regarding how the data collected through these tools can be used.

• Children’s Online Privacy Protection Rule (COPPA)

  COPPA imposes certain requirements on operations of websites, games, mobile apps, or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.

• Children’s Internet Protection Act (CIPA)

  CIPA imposes certain requirements on schools or libraries that receive discounts for Internet access for internal connections through the E-rate program—a program that makes certain communications services and productions more affordable for eligible schools and libraries.