Discussions

 View Only
  • 1.  Data Retention Policies for Departed Faculty/Staff

    Posted 01-26-2023 09:11 AM
    Hi ATLISers!

    Does your school have a data retention policy for Administrators, Staff, and/or Teachers who have parted ways with your organization? (I know the business office needs to keep certain records. I'm curious about policies regarding accounts and file retention.)

    • Do you suspend the user account and keep everything (Drive, Email) frozen in time? If so, for how long? 

    • Do you have a protocol to guide you in the decision to forward emails from the departed user to someone else in the org? Or, is this "upon request"?

    • Do you have a protocol for transferring file ownership from the departed user to someone else in the org?

    • Do you take backups of the departed user's computer and store them for safekeeping? If so, how long do you store this information?

    • If you use a service (ie: Spanning) to back up your Google accounts, do you deactivate this service right after the user departs your school? Or, do you wait a certain amount of time? 

    Anything that I missed or should be thinking about as well?

    Thank you all in advance :)
    #General

    ------------------------------
    Liz Beck, Director of Technology
    Laurence School
    Valley Glen CA
    ------------------------------


  • 2.  RE: Data Retention Policies for Departed Faculty/Staff

    Posted 01-27-2023 09:09 AM
    Liz, 

    Great question and I'm eager to learn what other schools are doing.  I'll share our policy here, with the disclaimer that we are in the process of formalizing a lot of our policies and reviewing to be sure that they are in line with best practices, especially when it comes to security.  Note that these policies are more generous than other places I've worked, and I am especially curious how they compare with similar independent schools.

    Deactivated: 

    • Staff Retirement/Resignation with notice (good terms) - 30 days following the last day of work 
    • Faculty at end of school year – July 31st (30 days following end of contract) 

    Account Deletion: 

    • 24 months after deactivation 

    Staff terminations will be handled on a case-by-case basis; thankfully that is not a frequent occurrence.

    With regard to your other questions, we generally do not transfer file ownership upon staff departures.  We are a MS school and have adopted Teams.  We strongly encourage our users to keep working files in the Teams data structure so that the transitions that take place with administration/responsibility shifts (not just resignations) are easier to manage the data transfer.  Adding and removing members from Teams is a much better practice.  We're only about 18 months into this process and it does work, but patience is required!

    We use Datto for our MS 365/OneDrive and Google Drive data backups.  I believe we need to revisit our retention policy for these backups.  Very interested in what other schools do!



    ------------------------------
    Susan Fuhs
    Norfolk Academy
    Norfolk VA
    swfuhs@norfolkacademy.org
    ------------------------------



  • 3.  RE: Data Retention Policies for Departed Faculty/Staff

    Posted 02-02-2023 05:48 PM
    Thank you, Susan!

    We're doing the following (and working on formally documenting this process):
    • Ask the departing user to transfer ownership of any necessary files to another user on their team. 
    • We suspend the user account the last day of work, which is normally at the end of the last day, immediately after keys/computer is handed in. 
    • We suspend Spanning after 30 days of departure.
    • If there are no requests to retrieve or transfer files from a departed user account, we're planning on deleting the account after 1 year.
    • If the user played a key role at the school, account transfer/deactivation and Spanning deactivation will be made on a case-by-case basis.
    • All graduating and withdrawing students will be encouraged to export all work from Google Drive. Their accounts will be suspended on June 30. Graduating student accounts will be deleted after 1 year and withdrawn students will be deleted after 3 years. (We're a K-6 school, and students get a Google account in 3rd grade. So, 3 years is the max amount of time for a withdrawn student to potentially return.)
    We're still thinking about the computer backup piece. This will likely will be on a case-by-case basis as well depending on the role the user played at the school. 

    Thanks again for taking the time to respond!
    Liz

    ------------------------------
    Liz Beck
    Laurence School
    Valley Glen CA
    ------------------------------



  • 4.  RE: Data Retention Policies for Departed Faculty/Staff

    Posted 01-27-2023 10:02 AM
    We (MKA) have an entire page - Leaving MKA - dedicated to information for employees and students leaving the school. It covers what to do with the various service we provide, important dates for returning equipment, and what to expect to happen to your device (we issue laptops & iPads) and associated data.

    You can find the site here: https://www.mka.org/leavingmka.

    We are looking into other things relating to employee data, school resources, and data loss prevention (DLP) measures.

    ------------------------------
    William Stites
    Montclair Kimberley Academy
    Montclair NJ
    ------------------------------



  • 5.  RE: Data Retention Policies for Departed Faculty/Staff

    Posted 02-02-2023 05:48 PM
    Thank you, William! Helpful!

    ------------------------------
    Liz Beck
    Laurence School
    Valley Glen CA
    ------------------------------



  • 6.  RE: Data Retention Policies for Departed Faculty/Staff

    Posted 02-10-2023 10:23 AM

    Hello,

    I am new to ATLIS, so I hope I am engaging properly.  I am currently on a similar thread in my state organization discussion board.  I am seeking any laws governing data retention.  Also, do we have any legal precedents that have been set concerning data retention?  



    ------------------------------
    Robert Erger
    McKinney Christian Academy
    McKinney TX
    ------------------------------