Student Data Privacy

At DeKalb Community Unit School District 428, we take student information security seriously.

To maintain the confidentiality and integrity of the District's information, CUSD428 has implemented targeted processes and procedures. These can be categorized as:

    • Systems that control where key information is stored.

    • Access security practices and internal controls that restrict who has rights to view, add/delete, or edit information.

    • Physical access controls to District data centers and key networking equipment.

What is SOPPA?

Student Data and Privacy

Student data is protected through comprehensive privacy policies and security measures such as firewalls, secure servers, intrusion detection software, and other methods.

Effective July 1, 2021, school districts will be required by the Student Online Personal Protection Act (SOPPA) to provide additional guarantees that student data is protected when collected by the educational technology companies, and that data is used for beneficial purposes only (105 ILCS 85). In compliance, DeKalb Community Unit School District 428 only collects information that directly relates to school activities and safeguards the privacy of students and confidentiality of student data.

Data Privacy Agreements (DPA)

CUSD428 leverages the Student Data Privacy Consortium (SDPC), through SDPC we enter into contracts with 3rd party vendors who handle our student's data. If you would like to view the DPAs that CUSD428 currently holds, please click here

Click here for more information about the SDPC

If you have questions about approved, non-approved or any applications that are not on the list, please email

Other Important Data Privacy Laws

Family Education Rights and Privacy Act (FERPA)

Governs information in a student’s education record, restricting access and use of student information.

Click here for more information about FERPA

Children's Online Privacy Protection Act (COPPA)

Restricts the collection of personal information from children under 13 by companies operating websites, games, mobile applications, and digital services that are directed to children or that collect personal information from individuals known to be children.

Click here for more information about COPPA

Children's Internet Protection Act (CIPA)

Imposes certain requirements on schools that utilize the federal E-Rate program to receive discounts for internet access and other technology services, or that receive federal grants for other technology expenses.

Click here for more information about CIPA

Health Insurance Portability and Accountability Act (HIPAA)

A federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

Click here for more information about HIPPA