District 7 Privacy Standards
The District’s privacy standards are established in accordance with applicable federal and state law and Board policy, and are intended to reflect the District’s mission and values. These guiding concepts are intended to provide direction about many elements of the District’s practice, including the educational value of instructional technology, the primacy of children’s safety, and the importance of family rights.
The District utilizes filters and firewalls to prevent students from accessing harmful information on the Internet as well as to protect the privacy of student information.
The District also uses a tool provided by a third party, Education Framework, to determine whether websites, software, or apps are safe to use as part of instructional programming. Education Framework offers a student data privacy manager, EdPrivacy, which applies a scoring system to rate the privacy measures in place for a particular website, software or app. Based on the rating issued by EdPrivacy and other available information, the District decides if that particular website, software or app has adequate privacy measures to protect student data. If the privacy measures are found adequate, the District will approve the website, software or app for use by staff, students and/or parents. In some circumstances, the website, software or app will be only be approved for use in a limited manner, or only approved for use by staff members.
As described above, EdPrivacy uses a privacy quality scoring system based on 5 main components:
- Data privacy – what information is collected from students and what are the purposes for collecting that student data;
- Data deletion - the ability of parents/guardians to review and/or delete personal information collected from their children;
- Data security - whether data transferred over the Internet is encrypted and whether there are security policies and procedures that are reasonably designed to protect personal student information against risks, such as unauthorized access or unintended or inappropriate destruction, modification, or disclosure;
- Data integrity - whether student data is backed up on a regular schedule; and
- Data retention - whether there is a data retention policy stating that data will only be retained for as long as it serves an educational purpose.
The District ultimately decides whether or not to use the particular website, software or app based on the privacy quality score by provided by EdPrivacy and any other relevant information. Other relevant information may include consideration about the group of individuals who will be using the website, software or app, the manner in which the website, software or app will be deployed, and the intended reasons for use.