News reports about data breaches have become an all-too-common occurrence, a disturbing trend and one that raises the issue of how confidential information is protected.
Against that backdrop there is a renewed focus on ensuring that our schools’ technology services are secure and that sensitive student information – including test scores, grades, health evaluations, and disciplinary actions and so on -- is protected.
The importance of doing so was highlighted in December when an assistant principal in Missoula County, Mo. inadvertently sent out private student information stored in her computer to parents in an e-mail.
Breaches can come from mistakes as well as malicious intrusions by hackers. Missoula County Public Schools is undertaking a review of its privacy policies to prevent a recurrence. Other states are acting likewise, by reviewing and shoring up practices designed to protect confidential information.
Parents need to know that school districts and states, as well as the companies and industries that provide them technology services, adhere to fair information principles, industry standards and go beyond the regulatory floors set by existing laws.
While protections must be put in place, a balance is required to ensure parents, educators and policymakers have access to the information and academic data they need to improve our schools. Measuring and tracking student performance, course taking, and other relevant academic data is essential in building an effective education system. Such data provides an objective measure for assessing teacher and school quality, and thereby underpins accountability and directs more effective instruction. It also empowers parents and informs smarter decision-making.
One example is the state of Florida. It was a pioneer in collecting academic data to monitor student progress. This data has been shared, under strict guidelines and oversight, with accomplished education researchers. They then give the state feedback on the effectiveness of education initiatives such as the state’s K-3 literacy program.
Such information can be invaluable in guiding policies and classroom instruction. And it allows states to learn from each other. Researchers do not receive direct identifiers (such as students’ names) and they commit to using student data only for research purposes approved by the state. Researchers must also return or destroy data when studies are completed.
The challenge for states and school districts is to find ways to support such beneficial uses of data, while also prioritizing the protection of student information.
And they are acting. In 2015, 182 bills were debated in 46 states, with 15 state legislatures passing 28 laws concerning student data privacy. The pace has slowed down in 2016, but there were still 69 bills introduced in 26 states through the middle of March. Some help make data collections more transparent, but others could have unintended consequences that would undermine broader reforms or inadvertently shut off the flow of information required to move forward with needed innovations in classrooms.
Georgia got it right last year. Lawmakers unanimously approved comprehensive legislation, signed by Gov. Nathan Deal, which strengthens protections for student information, empowers parents to access their children’s information and supports innovative technology solutions with appropriate safeguards. The legislation is based on seven fundamental student data privacy principles that the Foundation for Excellence in Education (ExcelinEd) has developed for states to consider.
ExcelinEd is working with state policymakers and advocacy organizations to advance comprehensive, balanced student data privacy protections. These efforts include:
- Developing the Student Data Privacy, Accessibility and Transparency Act. This is model policy built on the fundamental principles adopted by Georgia. It provides protections that ensure student data is used responsibly by addressing data collected by the government, data collected by vendors and parental access to a child’s data.
- Providing an overview of the total number of states that address each area in statute, with specific state examples, by working with EducationCounsel. The diverse group of state specific student data privacy practices represents different contexts and strategies from around the country for achieving a common policy goal: using student data to improve learning while guarding student data privacy.
- Producing a research report, Protecting K-12 Student Data Privacy in a Digital Age, which provides various education stakeholders with recommended actions steps they can take to improve K-12 student data privacy and security.
- A self-paced online course that gives participants the chance to learn from top policy, education and industry experts. The course was designed for leaders like you in mind.
With these and a host of additional resources, ExcelinEd is ready to support legislators, policymakers and advocates as they work to modernize outdated laws and respond to the concerns of parents.
Visit www.ExcelinEd.org/Student-Data-Privacy to learn more.
The Foundation for Excellence in Education is transforming education for the 21st century economy by working with lawmakers, policymakers, educators and parents to advance education reform across America. Learn more at ExcelinEd.org