Data Privacy
Why do we need to care about data privacy and security?
Protecting your data, protecting staff data and protecting our student and families data
The State of Maine has a privacy law in regards to using software and apps with students. No accounts should be established for students unless the software/app has been determined to meet appropriate standards for student data privacy. Software and apps that are paid for and managed through the district budget are approved for student account creation and use. All other software and apps that staff want to use that require the creation of an account for students must be evaluated for meeting the standards of the Maine law before being used by students.
Maine State Law on Student Data Privacy
To assist schools in evaluating student data privacy concerns, the State provides school districts access to the Maine Student Privacy Alliance. The Maine Student Privacy Alliance is a collaboration of Maine school districts and vendors with the common goal of protecting students' privacy. As the world and education move increasingly into an online platform, it is more difficult and important than ever to establish standards that protect students and all other parties from privacy invasion. The MESPA seeks to set standards and hold members accountable to those standard so that all online applications implemented by schools are safe for everyone involved without having to renegotiate terms on every occasion.
Maine Student Privacy Alliance
MESPA works by providing a searchable online database of companies that have signed an agreement (MESPA V1 with Exhibit) that was written to be in compliance with Maine state law on student data privacy. Individual schools or districts that are members of MESPA upload negotiated agreements so other schools/districts can see and use the agreements. Anyone can search the Alliance for companies that have provided approved, MESPA V1 with Exhibit, agreements that conform with the Maine state law on student data privacy. Search is also available by product name.
Other Resources for Student Data Privacy
APP/SOFTWARE APPROVAL PROCEDURE
Google for Education and Student Data Privacy
RSU 40 is a Google Apps for Education District. The Google Apps for Education core services are the heart of Google’s educational offering to schools. The core services are Gmail, Calendar, Classroom, Contacts, Drive, Docs, Forms, Groups, Sheets, Sites, Slides, Talk/Hangouts and Vault. These services are provided under the Google Apps for Education agreement. Any other google services are not covered by the educational domain and will need a permission form. Permission forms for Google additional services will be sent home through ParentSquare. Students without a signed Google additional services permission form should not access those applications.
Schools can use Google Apps for Education (GAFE) core services in compliance with COPPA and FERPA. GAFE core services contain no advertising and do not use student data for advertising purposes.
More than 50 million students, teachers and administrators in almost every country in the world rely on GAFE to learn and work together.
Google Apps for Education Privacy and Security Informatio
Additional Student Privacy Information
Review FERPA information
Other Quick Tips to Know
Do not put student names in the subject line of an email
Follow district/school policy and procedures for posting pictures of students
Make sure you understand google doc sharing and privacy procedures before posting student data in google and sharing it