Parents' Bill of Rights

PARENTS’ BILL OF RIGHTS
FOR DATA PRIVACY AND SECURIT
Y
The Oceanside School District, in recognition of the risk of identity theft and unwarranted invasion of privacy, affirms its commitment to safeguarding student personally identifiable information in education records from unauthorized access or disclosure in accordance with State and federal law, and establishes the following parental bill of rights:

1. Students’ personally identifiable information will be collected and disclosed only as necessary to achieve educational purposes in accordance with State and federal Law;

2. A student's personally identifiable information cannot be sold or released for any marketing or commercial purposes by the district or any a third party contractor. The district will not sell student personally identifiable information and will not release it for marketing or commercial purposes, other than directory information released by the district in accordance with district policy;

3. Parents have the right to inspect and review the complete contents of their child's education record;

4. State and federal laws, such as NYS Education Law §2-d and the Family Educational Rights and Privacy Act, protect the confidentiality of students’ personally identifiable information. Safeguards associated with industry standards and best practices, including but not limited to, encryption, firewalls, and password protection, must be in place when data is stored or transferred;

5. A complete list of all student data elements collected by the State Education Department is available for public review at http://nysed.gov.data-privacy-security or by writing to: Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234;

Parents have the right to have complaints about possible breaches and unauthorized disclosures of student data addressed. Complaints should be directed to Melissa O’Geary, Oceanside School District, Director of Data, Assessment, and Administrative Services/ Data Privacy Officer, 145 Merle Avenue, Oceanside, NY 11572, or by email to mogeary@oceansideschools.org or by telephone at 516- 678-8554. Complaints can also be directed to the New York State Education Department online at http://nysed.gov.data-privacy-security, by mail to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234 or by email to privacy@mail.nysed.gov or by telephone at 518-474-0937;

6. Parents have the right to be notified in accordance with applicable laws and regulations if a breach or unauthorized release of their student’s personally identifiable information occurs;

7. Parents can expect that educational agency workers who handle personally identifiable information will receive annual training on applicable federal and state laws, regulations, educational agency’s policies and safeguards which will be in alignment with industry standards and best practices to protect personally identifiable information;

8. In the event that the District engages a third party provider to provide, deliver or facilitate student educational services, the contractor or subcontractors will be obligated to adhere to the District’s data security and privacy policy and with State and federal laws to safeguard students’ personally identifiable information, as well as to this Bill of Rights and required supplemental information for each contract.

9. This Parents’ Bill of Rights will be included with every contract or other written agreement entered into by the District with a third-party contractor if the contractor will receive student data or teacher or principal data. The Bill of Rights shall also be supplemented to include information about each contract or other written agreement that the District enters into with a third-party contractor receiving student data or teacher or principal data, including: the exclusive purpose(s) for which PII Data will be used; how the contractor will ensure confidentiality and data protection and security requirements; the duration and date of expiration of the contract and what happens to PII Data upon the expiration of the contract; if and how the accuracy of PII Data collected can be challenged; where the student data or teacher or principal data will be stored, described in such a manner as to protect data security, and the security protections taken to ensure such data will be protected and data security and privacy risks mitigated; and how PII Data will be protected using encryption while in motion and at rest.

Parents can request information about third party contractors by contacting Melissa O’Geary, Oceanside School District, Director of Data, Assessment, and Administrative Services/ Data Privacy Officer, 145 Merle Avenue, Oceanside, NY 11572, or by email to mogeary@oceansideschools.org or by telephone at 516- 678-8554 or can access the information on the district’s website oceansideschools.org.

10. This Parents’ Bill of Rights and supplemental information for contracts with third-party contractors shall be posted on the District’s website at oceansideschools.org.