Parents' Bill of Rights for Data Privacy and Security
In accordance with New York State Education Law Section 2-d, the Red Hook Central School District provides the following Parents’ Bill of Rights for Data Privacy and Security, which is applicable to all students and their parents and legal guardians.
(1) A student's personally identifiable information cannot be sold or released for any commercial purposes;
2) In accordance with FERPA and Section 2-d of the New York State Education Law, parents have the right to inspect and review the complete contents of their child's education record;
(3) State and federal laws protect the confidentiality of personally identifiable information, and safeguards associated with industry standards and best practices, including but not limited to, encryption, firewalls and password protection, must be in place when data is stored or transferred;(4) A complete list of all student data elements collected by the State is available for public review at http://www.p12.nysed.gov/irs/sirs/2011-12/2011-12SIRSGuidance/NEWER/2013-14SIRSManual9-1_20131107.pdf or by writing to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany NY 12234, email to CPO@mail.nysed.gov. The complaint process is under development and will be established through regulations to be proposed by NYSED’s Chief Privacy Officer, who has not yet been appointed.(5) Parents have the right to submit complaints about possible breaches of student data. Any such complaint must be submitted, in writing, to: Paul Finch, Red Hook Central School District, 9 Mill Road, Red Hook, NY 12571, (845) 758-2241 ext. 55100, firstname.lastname@example.orgDisclosure of Information to Third Party Contractors
In addition to the Parent’s Bill of Rights, Education Law §2-d also imposes obligations with respect to a school district’s disclosure of student information to third party contractors, consultants or vendors. Specifically, the law requires that contracts between school districts and third party contractors/consultants/vendors include a data security and privacy plan that outlines how all state, Federal, and local data security and privacy contract requirements will be implemented over the life of the contract, consistent with the educational agency’s policy on data security and privacy. Such plan shall include, but not be limited to, a signed copy of the parents bill of rights and a requirement that any officers and employees of the contractor, including any assignees, who have access to student data or teacher or principal data have received or will receive training on the federal and state law governing confidentiality of such data prior to receiving access.Additional ResourcesThese links redirect you to other resources about student data reporting maintained by entities outside of the Red Hook Central School District's control. They are provided here for informational purposes only."Who Uses Student Data?" YouTube videoCreated by the Data Quality Campaign