Maintain online privacy
Privacy is the act of safeguarding confidential information that should only be disclosed to certain individuals. Check out this video from the United States Department of Education about privacy to learn more about PII, directory information, and the laws that govern student privacy and educational records.
School privacy policies
Many schools enact policies and procedures that support federal laws like the Family Educational Rights and Privacy Act of 1974 (FERPA) and the Children's Online Privacy Protection Act of 1998 (COPPA). Review these examples of common school policies.
- Some school systems classify certain types of data as directory information. Often this includes private information that can be used in publications like a school yearbook. Schools often give students and guardians the option to opt-in or opt-out of certain uses of directory information.
- Schools also follow media release policies that safeguard privacy in pictures, audio files, and videos. Media release policies are often separate agreements that define what can be collected, where media can be shared, and under what circumstances. Students under the age of 18 usually require guardian signatures.
- Companies that handle private data and transactions must disclose how they collect, share, and protect personal information. Companies outline their processes and procedures for ensuring privacy in a privacy policy. Schools often review privacy policies when deciding whether to adopt an online service.
Your private data
Ensuring privacy in schools often refers to student information, but privacy applies to you as well. Most schools store personal and professional records, financial information for salary deposits, and PII for tax reporting. This means that a privacy breach from a cyberattack can harm you as well.
You're a gatekeeper for your own private data and your students'. Not only does this make you a prime target for criminals who want to steal PII, but it also means that you need to be careful about what information you disclose and with whom.
Explore these general guidelines for things that you should and shouldn't do to maintain privacy.
| DO | DON'T |
|---|---|
| Understand what information can be shared and with whom. | Assume information can't be shared with all interested parties. |
| Check with your school IT department before using any unapproved service, like a new online application or plug-in. | Use a new service or application with students before checking how it processes, stores, and shares data. |
| Speak with your school's technology department about any protocols for creating student accounts (first name only, pseudonym) if this is allowed. | Create student accounts for online services or applications unless approved by your school’s technology department. |
Next steps
Work with your colleagues and school technology leaders to answer these questions about maintaining student privacy:
- Where can I find out how student directory information is shared?
- Where can I check media release permissions if I want to share an image or video of a student on an online platform?
- What is the process for using a new, not previously approved application or service with students?
- Who can I ask for support if I want to use a new online service with my students and I'm unsure about what information to share (like names, email addresses)?
- Can I create student accounts for online applications and services?