Student Data Security

View our district's Data Security and Privacy policy

Data Privacy & Security

• NYS Information Security Breach Policy
• NYS Security Breach Reporting Form
  • Report an Improper Disclosure to NYSED
• Protection of Student, Teacher, and Principal Personal Information
• Education Records Policy
• FERPA Information
  • Application to Inspect FERPA Records
  • Student Privacy Record of FERPA Requests
  • Request to Correct FERPA Records
  • Student Privacy FERPA Notice
• Ed Law 2d Section 121
• Ed Law S2-D - Bill of Rights for Data Privacy and Security
• NYSED Parents Bill of Rights
• Student Data Privacy and Security

Federal Laws that Protect Student Data

Education Law 2-D (click on link to download)

Provides guidance to educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data.

Part 121 of the Regulations of the Commissioner of Education (click on link to download)

The Board of Regents adopted Part 121 of the Regulations of the Commissioner of Education on January 13, 2020. These rules implement Education Law Section 2-D.

Family Educational Rights and Privacy Act (FERPA) (click on link to download)

The foundational federal law on the privacy of students’ educational records, FERPA, safeguards student privacy by limiting who may access student records, specifying for what purpose they may access those records, and detailing what rules they have to follow when accessing the data.

Protection of Pupil Rights Amendment (PPRA) (click on link to download)

PPRA defines the rules states and school districts must follow when administering tools like surveys, analysis and evaluations funded by the U.S. Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies in place regarding how the data collected through these tools can be used.

Children's Online Privacy Protection Rule (COPPA) (click on link to download)

COPPA imposes certain requirements on operators of websites, games, mobile apps or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.

District Software Inventory

Third-party contractors who receive student information must abide by certain identified measures to support the protection of student privacy. Utica City School District posts an inventory of our contractors that collect/process student information along with Supplemental Information for each of these contracts. Supplemental Information can be viewed HERE and includes the following information:

• Exclusive purpose for data use
• Subcontractor management processes
• Contract duration
• Data destruction practices
• Data accuracy challenge procedures
• Data storage / processing locations
• Security protections in place
• Encryption practices

Please note, where a contractor or information system is listed in our inventory and no supplemental information is displayed, the District is in the process of pursuing the necessary contract language with that entity.