Student Data Privacy FAQ

If a vendor refuses to sign an agreement, the software cannot be used.  While it is possible to obtain parental consent, we consider this to be not a viable option.  In addition to obtaining written parental consent and tracking that consent, we must also offer an alternative product or method for students whose parents do not provide consent.  

Every company creates their own privacy agreement.  Their agreement is written for their purposes and may not comply with FERPA or other state or federal laws that protect students.  By agreeing to the State DPA through the TEC Collaborative, we can ensure our students are properly protected.

The TEC Collaborative helped create the Massachusetts State Data Privacy Agreement.  It is the same agreement used across the state.  If a vendor doesn't sign, they are not signing for any Massachusetts school.

Use of a digital tool that has not been vetted presents the opportunity for student level data to be inappropriately exposed, shared, or in some cases sold.

A made up username or ID is simply another student identifier. It does not change the fact that the online digital tool may be collecting student level data and work that needs to be protected.

All applications should be properly vetted to ensure any student level data collected is properly protected.

No, these applications also need to be vetted. Using a WPS Google Login does not ensure that the data remains in the WPS Google Domain.

Refer the companies to the WPS website as well as the Student Data Privacy Consortium, who’s goal is to engage vendors on this topic.

In order to ensure all student level data is properly protected all online applications need to be properly vetted by the OIT department.

Any resource that a student interacts with needs to be approved.

All approved resources can be found here.

Yes, this process is being replicated in 16 states and thousands of school districts.

Parental consent is an option, be we consider this an option of last resort. Managing parental consent for all students and addressing replacement resources for students without parental consent can be a hinderance.

First, check if the resource already has an agreement on our Digital Resource List.  If the resources is not already on the list with an approved agreement, submit a help desk ticket or email the Director of Technology & Digital Learning.

This depends on how responsive the vendor is as well as any issues that may exist in the vendor’s student data protection strategies. The entire process could take days or up to a year.

Contact the Director of Technology & Digital Learning.

No.

OIT will help you seek out an alternative application that meets your needs and adequately protects student data privacy.

There are many reasons that might drag out the process. These may include;

• The Vendor business model - especially for free applications - leverages the re-use of student level data for profit.
• Vendor has no legal resources to review document
• Vendor refuses to consider separate agreement
• The resource has flaws that expose student level data

Contact OIT and we will assist.

Same process applies for teacher paid resources, District paid, or free resources.

Not without written parental consent.

Not without written parental consent.