Student Data Privacy

SOPPA

The Student Online Personal Protection Act, or SOPPA, is the data privacy law that regulates student data collection and use by schools, the Illinois State Board of Education, and educational technology vendors. Depending upon the particular educational technology being used, the ROE may need to collect different types of student data, which is then shared with educational technology vendors through their online sites, services, and/or applications.

• Annual Notice to Parents about Educational Technology Vendors under SOPPA

As required by SOPPA, ROE26 must enter into Data Privacy Agreements (DPA) with each education technology vendor we work with. The agreements outline the following:

• What data is stored
• How data is protected
• What the vendor can and cannot do with the data
• Procedures in the event of a data breach

Data Privacy Agreements (DPA)

ROE26 utilizes the the Student Data Privacy Consortium (SDPC) to enter into contracts with educational technology vendors who handle our student data. The SDPC is a unique collaborative of schools, districts, regional, territories and state agencies, policy makers, trade organizations and marketplace providers addressing real-world, adaptable, and implementable solutions to growing data privacy concerns. Through the SDPC, we enter into contracts with 3rd party vendors who handle our data. 

• View Data Privacy Agreements that ROE26 Currently Hold

How Can Parents View and Correct Student Data?

Under the Illinois Student Online Personal Protection Act (SOPPA), parents/guardians have the right to review their child’s covered information.  Parents may request to inspect and review their student’s covered information.  Parents will be required to provide proof of identity and relationship to the student before access to the covered information is granted.  If the covered information you request includes your child’s school student records, the ROE will permit you to inspect and review any school student records of your child in accordance with the ROE’s procedures for student records requests.

The ROE shall provide an electronic copy of the records within 45 days of receiving a request for the covered information.  A parent may make a request to review and receive copies of covered information no more than two requests per student per quarter by using the form below:

• Parent Request Form for Student Covered Information

Parents may request corrections of factual inaccuracies contained in their student’s covered information. If the covered information you are requesting be corrected includes your child’s school student records, the ROE will follow its procedures for amendment of student records with respect to those school student records.  ROE26 will review the request, determine if an inaccuracy exists and if so, will make any necessary corrections within 90 days of the request.  If the correction needs to be made by the Illinois State Board of Education or a vendor, any necessary corrections will also be made within 90 days of the request. and ROE26 will notify the parent of any necessary corrections within 10 days after receiving confirmation of the corrections. 

If a parent requests the deletion of any covered information, ROE26 will review the request to determine whether such a deletion would violate the law or result in the student being unable to participate in the ROE’s curriculum.

• Parent Request Form for Correction of Student Covered Information

What Happens if Data is Breached?

In the unlikely situation that a vendor experiences a potential data breach, the ROE will be notified. After receiving notice of a potential breach, we will evaluate the report and if confirmed, provide notifications to parents. Information on any breach that impacts more than 10% of our students will be publicly displayed. ROE26 will also notify parents and post information in the event the ROE’s data systems are breached.

Note:  A notice of breach may be delayed if a law enforcement agency determines that the notification will interfere with a criminal investigation.

FERPA

FERPA (Family Educational Rights and Privacy Act) is a Federal law enacted in 1974 that protects student academic records. This law is applicable to any and all schools that receive funds from the U.S. Department of Education. Under FERPA, parents/guardians are given specific rights that pertain to these academic records. Once a student graduates or turns 18, these rights transfer from the parents to the students.

FERPA Legislation

COPPA

COPPA (Children’s Online Personal Protection Act) is a Federal law enacted in 1998. COPPA gives parents control over what data is collected about their children online at school, and specifically targets students under age 13. COPPA covers websites as well as apps.

COPPA Legislation

CIPA

CIPA (Children’s Internet Protection Act) is a Federal law enacted in 2000 to protect children from harmful and inappropriate internet content. It also ties a financial incentive for districts to follow guidelines in order to receive discounts on online educational services.

CIPA Legislation

PPRA

PPRA (Protection of Pupil Rights Amendment) ensures that parents may inspect instructional materials to be used in the classroom, enforces districts obtaining parental consent before requiring certain activities, such as surveys, evaluations, or other data analyses.

PPRA Legislation