Student Data Privacy
Franklin Park School District 84 takes student data security seriously. All of our student data is protected through comprehensive privacy policies and security measures such as firewalls, secure servers, intrusion detection software, and other methods.
Student Online Personal Protection Act (SOPPA)
The Student Online Personal Protection Act, or SOPPA, is the data privacy law that regulates student data collection and use by schools, the Illinois State Board of Education, and education technology (EdTech) vendors. Effective July 1, 2021, school districts will be required to provide additional guarantees that student data is protected when collected by educational technology companies, and that data is used for beneficial purpose only (105 ILCS 85).
DISTRICT REQUIREMENTS:
- Annually post a list of all operators of online services or application used by the district. D84 Data Privacy Agreements
Some of the agreements may have originated with another school district, therefore you will see the subscribing agreement, Exhibit E, next to those agreements. Exhibit E's allow districts to piggy-back on the original agreement. - Annually post all data elements that the school collects, maintains, or discloses to any entity. This information should also explain how the school uses the data and to whom and why it discloses the data.
- Post contracts for each operating within 10 days of signing.
- Annually post subcontractors for each operator.
- Post the process for how parents can exercise their rights to inspect, review, and correct information maintained by the school, operator, or Illinois State Board of Education (ISBE).
- Post data breaches within 10 days and notify parents within 30 days (60 if it's a 3rd party data breach).
- Create a policy of who can sign contracts with operators.
- Designate a privacy officer to ensure compliance.
- Maintain reasonable security procedures and practices. Agreements with vendors in which information is shared must include a provision that the vendor maintains reasonable security procedures and practices.
District 84 Privacy Officer
847-455-4230
Family Educational Rights and Privacy Act (FERPA)
The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C.§ 1232g; 34 CFR Part 99) is a federal law that protects the privacy of student educations records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.
- Generally prohibits districts from disclosing students' education records without a written parent or eligible student consent.
- "Education records" are broadly defined to include any record, files, or documents maintained by a school district that contain personally identifiable information on students.
- Grants parents and guardians the right to inspect and review education records; request that school amends the student's records; consent in writing to the disclosure of personally identifiable information from the student's records, subject to certain enumerated exceptions.
Children's Online Privacy Protection Act (COPPA)
The Children's Online Privacy Protection Act (COPPA) (P.L. 105-277; 15 U.S.C. § 6501 et seq.; 16 C.F.R. part 312.) restricts the collection of personal information from children under 13 by companies operating websites, games, mobile applications, and digital services that are directed to children or that collect personal information from individuals known to be children.
- COPPA requires companies to have a clear privacy policy, provide direct notice to parents, and obtain parental consent before collecting information from children under 13.
Children's Internet Protection Act (CIPA)
The Children's Internet Protection Act (CIPA) (47 U.S.C. §254(h); 47 C.F.R. §54.520.) imposes certain requirements on schools that utilize the federal E-Rate program to receive discounts for internet access and other technology services, or that receive federal grants for other technology expenses.
- Requires that district adopt an internet safety policy that includes protection measures to block or filter internet access to visual depictions that are obscene, child pornography, or harmful to minors.
- School districts must monitor the online activities of children and educate children about appropriate online behavior, including interacting with other individuals on social networking websites and cyberbullying awareness and response.