Guiding document and checklist from Privacy Technical Assistance Center (PTAC) of NCES

Stakeholder Practices

I. Administrators

(A) School and Central Office Administrators will receive refresher training and/or updates on Data Governance procedures annually.

(B) Principals and Central Office Administrators shall contact the Information Technology Department when in doubt about how to handle Class ll and lll information

*Principals and Central Office Administrators will be kept aware of emerging issues pertaining to data security.

II. School Registrar Data Security Training

(A) School registrars and System administrators will be trained and refreshed on Data Governance and other data security procedures twice annually.

(B) School registrars' and System administors adherence to the data security procedures will be monitored and audited by the Information Technology Department, randomly and otherwise.

lll. Teacher and Staff Training

(A) All new teachers will complete training on all District technology policies, including how their use of technology is governed by FERPA and other data security procedures established by the District. (not sure this is necessary - layered training based on roles - already discuss FERPA, would perhaps be better to embed a slide or two on DG, CS and a few words in that)

(B) All department heads will be expected to educate their support staff on data governance as it applies to their department's work.

(C) All users will receive reminders throughout the year regarding malware threats and phishing scams and how to report suspected threats.

IV. Parent and Booster Training

(A) School administrators shall educate PTOs, boosters, and other parent groups about FERPA and student confidentiality. For instance, organizations who intend to post information about the school's students or activities should not compromise the privacy of students in protective custody. Because the school cannot tell these groups which students may be in such situations, the organization should be cautioned about exposing any information or photos that could cause harm to students or their families.

(B) The Information Technology Department shall have procedures that include educational materials for booster organizations who wish to post their own websites. This shall include both FERPA and COPPA information.