ED2D

New York State Education Law 2-d 

New York State Education Law 2-d went into effect in April 2014. The law focused on the privacy and security of personally identifiable information (PII) of students, classroom teachers, and principals.

New regulations reiterate that education agencies must publish a parent’s bill of rights for data privacy and security as required by the current Education Law 2-d. In addition, the parent’s bill of rights must be included with every contract with a third party contractor that receives PII.  

Parent Bill of Rights:

Parents Bill of Rights for Data Privacy and Security
 
The District will publish its Parents' Bill of Rights for Data Privacy and Security (Bill of Rights) on its website. Additionally, the District will include the Bill of Rights with every contract or other written agreement it enters into with a third-party contractor under which the third-party contractor will receive student data or teacher or principal data from the District.
 
 The District's Bill of Rights will state in clear and plain English terms that:

1. A student's personal identifiable information (PII) cannot be sold or released for any commercial purposes;
2. Parents have the right to inspect and review the complete contents of their child's education record;
3. State and federal laws protect the confidentiality of PII, and safeguards associated with industry standards and best practices, including but not limited to encryption, firewalls, and password protection, must be in place when data is stored or transferred;
4. A complete list of all student data elements collected by the state is available for public review at the following website http://www.nysed.gov/student-data-privacy/student-data-inventory or by writing to the Office of Information and Reporting Services, New York State Education Department, Room 865 EBA, 89 Washington Avenue, Albany, New York 12234; and
5. Parents have the right to have complaints about possible breaches of student data addressed.
    
    Complaints should be directed in writing to Privacy Complaint, Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, New York 12234. Complaints may also be submitted using the form available at the following website http://www.nysed.gov/student-data-privacy/form/report-improper-disclosure.  Parents can also send their written complaint to the Sullivan BOCES Data Protection Officer at 15 Sullivan Avenue, Suite 1, Liberty New York 12754.