Discussions

 View Only
  • 1.  Enrollment contracts, data privacy, and international compliance

    Posted 11-29-2022 11:26 AM
    Hey all,

    What technology components (data privacy language, AUP/RUP, etc) are included in your school's re-enrollment contracts? If you have international students, how are you ensuring compliance with their country of origin's data privacy regulations?

    There was a similar thread on this on some other listserv, and I can't find it now. It came up again as a topic that people need help with, so I pose the issue to all of you.

    Do you have any additional gaps where you feel like you need more support?

    Warmly, 

    #General

    ------------------------------
    Dr. Ashley Cross
    Senior Director of Education and Content
    www.theatlis.org
    888-502-8547
    ------------------------------


  • 2.  RE: Enrollment contracts, data privacy, and international compliance

    Posted 11-30-2022 08:25 AM
    Related: what are schools doing about getting parental permission for their child(ren)'s use of all the apps we require? The re-enrollment contract seems like a good place to gather this.
    Some public school districts have a good sign off practice. Here's one example: https://cooperms.fcps.edu/adopteddigitalresources
    It's great that they have a section explaining their "commitment to student privacy and how [digital] resources are vetted".

    While we may or may not be held to FERPA / COPPA / etc. standards, at least not to the same degree as public schools, has anyone adopted this type of notification and consent process?

    ------------------------------
    Bill Freitas, CISSP, CETL
    MIS Director/IT Manager
    ------------------------------



  • 3.  RE: Enrollment contracts, data privacy, and international compliance

    Posted 11-30-2022 08:46 AM
    @Bill Freitas at MKA, we have included language in our contracts (enrollment and re-enrollment) for years. We originally had it as a separate document but rolled it into a single contract. In addition, the school's tools have been vetted using a fairly extensive form (included in the ATLIS 360 Guide), and we list all related information on our website - https://www.mka.org/academics/11-technology/privacy-policies-and-tools.

    I originally wrote about this on my blog ten years ago - https://www.williamstites.net/2012/05/22/coppa-and-verifiable-parental-consent/ - outlining our process and early consideration for it. I blame/credit @Hiram Cuevas for much of our work in this area.



    ​​

    ------------------------------
    William Stites
    Montclair Kimberley Academy
    Montclair NJ
    ------------------------------