Public Act 16-189

Student Data Privacy

Act Concerning Student Data Privacy

On October 1, 2016 the State of Connecticut passed Public Act 16-189 "An Act Concerning Student Data Privacy". Generally, this law was passed as a minimum set of guidelines for what student data is collected and how its used by external software vendors. LEARN is fully dedicated to protecting the data and privacy of its students by complying to this law. In addition, LEARN is also compliant with Family Education Rights and Privacy Act (FERPA) and Children Online Privacy Protection Act (COPPA). 

What is the purpose of this law?

This law prevents targeted advertising, selling or trading the student data, records and student-generated content. It prevents disclosing student information unless for school purposes or to ensure compliance with federal law. Therefore, any apps or websites used by staff that has any student data entered into it has to be reviewed under this process. If the privacy policy indicates that the website or app collects student data, a written contract has to be signed by the 3rd party vendor to protect LEARN students. 

 

How can we go about using digital resources?

  1. Research 
  2. Help Desk
  3. Review
  4. Contract Signed
  5. Software Installation

How does this affect all LEARN staff?

We are working to obtain contracts with existing and potential vendors. To make sure that we are in compliance with this law, we are asking schools to submit requests for software that is considered critical to the school first. The office managers can make the requests to the helpdesk. The information technology department will review the privacy policy to determine if a contract is needed between LEARN and the vendor. If a contract is needed, LEARN will contact a representative from the vendor to submit for a signature. Once a contract is obtained, LEARN will sign and post the contract to the website. 

  • Research this software and determine if LEARN is not already using something like it.
  • Contact your office manager to put in a request to the Help Desk to get the software reviewed to determine if a contract is needed.
  • IT reviews Privacy Policy to determine if software needs a contract.
  • If NO contract is needed, software is installed/ready for use by requestor.
  • If a contract is needed, it is generated and signed by 3rd party vendor.
  • After contract is signed, software is then installed/ready for use by requestor.

 

Current Contracts