District 160 takes the privacy of student data seriously. This information is in an effort to be in compliance with the updated amendments to the Student Online Personal Protection Act (SOPPA).
What is SOPPA?
What happens to the student data that we send to a third party vendor? Information like names, birthdates, etc. may be provided by District160 to a third party like IXL, NWEA MAP, etc. What protections do those companies have in place to make sure that our student's data is not sold or freely given to others? As part of SOPPA, these companies must enter into Data Privacy Agreements (DPA) with each district they work with. These agreements outline what data is stored, how it is protected, what the company can and cannot do with that data, and what they will do in the event of a data breach.
Important Data Privacy Laws
Student Online Personal Protection Act (SOPPA):
SOPPA
Guarantees that student data is protected when collected by educational technology companies, and that data is used for beneficial purposes only.
Children’s Online Privacy Protection Act (COPPA):
COPPA
Restricts the collection of personal information from children under 13 by companies operating websites, games, mobile applications, and digital services that are directed to children or that collect personal information from individuals known to be children.
Children’s Internet Protection Act (CIPA):
CIPA
Imposes certain requirements on schools that utilize the federal E-Rate program to receive discounts for internet access and other technology services, or that receive federal grants for other technology expenses.
Family Educational Rights and Privacy Act (FERPA):
FERPA
Governs information in a student’s education record, restricting access and use of student information.
Parent/Guardian Rights
Parents/guardians have the right to inspect, review, and correct information maintained by the school, operator, and the Illinois State Board of Education. All requests should be directed to the Director of Technology.
Data Breaches
In the event that there is a data breach, the District will notify parents/guardians via district communication systems within 30 days the data breach and within 60 days if a third-party is responsible for the data breach.