Student Data Privacy

The California Department of Education defines student data and personally identifiable information (PII) as:

• Student’s name, identification number, address, race/ethnicity, gender, date of birth, place of birth, name and address of parent or guardian

• Attendance data

• Data regarding student progress, including grade level completed, school attended, course enrollment, academic work completed, and date of graduation

• Standardized test scores

• Disciplinary actions

• Data regarding eligibility for, or participation in, school lunch programs

• Data regarding eligibility for special education and special education services provided to the student

• Data regarding eligibility for other compensatory programs and special program services provided to the student

As a Local Education Agency, we are required to follow all State and Federal regulations pertaining to student data privacy. We are also trusted by our stakeholders to maintain the privacy and integrity of student data. Please see below for a list of regulations pertaining to student data privacy.

• Student Online Personal Information Protection Act

• AB 1584 (Third Party Contracts)

• AB 1442 (Social Media)

• SB 178 (Electronic Devices)

• EC Section 49073

• Family Educational Rights and Privacy Act (FERPA) – 20 U.S.C. Section 1232g

• FERPA Regulations – 34 CFR Part 99

• Protection of Pupil Rights Amendment (PPRA) – 20 U.S.C. § 1232h

• Children’s Online Privacy Protection Act (COPPA) – 15 U.S.C. §§ 6501-6506

• COPPA Regulations – 16 CFR Part 312

• California Public Records Act (PRA) – California Government Code §§ 6250 – 6270

• California Information Practices Act (IPA) – California Civil Code §§ 1798-1798.1

• California Code of Regulations (CCR), Title 5, §§ 430-438

• EC Section 60607

• The Richard B. Russell National School Lunch Act, as amended (42 U.S.C. § 2, 1751) (PDF)+

The most efficient way to tell if a website or application is compliant is to look at its Privacy Policy. When we are vetting websites and applications we are looking to see that we can find information regarding FERPA and COPPA compliance, like in the example below. If you have any questions or concerns, please contact Innovation and Learner Engagement at 80210.

This notice describes the personal information we provide to Google for these accounts and how Google collects, uses, and discloses personal information from students in connection with these accounts.

Using their Google Workspave for Education accounts, students may access and use the following “Core Services” offered by Google (described at https://gsuite.google.com/terms/user_features.html):

• Gmail

• Google+

• Calendar

• Chrome Sync

• Classroom

• Cloud Search

• Contacts

• Docs, Sheets, Slides, Forms

• Drive

• Keep

• Sites

• Vault

In addition, we also allow students to access certain other Google services with their G Suite for Education accounts. Specifically, your child may have access to the following “Additional Services”:

• YouTube

• Blogger

• Google Maps

• Google Earth

• Chrome Web Store

• FeedBurner

• Google Bookmarks

• Google Books

• Google Cloud Print

• Google My Maps

• Google Takeout

• Tour Creator

• Science Journal

Google provides information about the information it collects, as well as how it uses and discloses the information it collects from G Suite for Education accounts in its G Suite for Education Privacy Notice. You can read that notice online at https://workspace.google.com/terms/education_privacy.html You should review this information in its entirety, but below are answers to some common questions:

In Google Workspace for Education Core Services, Google uses student personal information to provide, maintain, and protect the services. Google does not serve ads in the Core Services or use personal information collected in the Core Services for advertising purposes.

In Google Additional Services, Google uses the information collected from all Additional Services to provide, maintain, protect and improve them, to develop new ones, and to protect Google and its users. Google may also use this information to offer tailored content, such as more relevant search results. Google may combine personal information from one service with information, including personal information, from other Google services.

No. For Google Workspace for Education users in primary and secondary (K-12) schools, Google does not use any user personal information (or any information associated with a Google Workspace for Education Account) to target ads, whether in Core Services or in other Additional Services accessed while using an G Suite for Education account.

We may allow students to access Google services such as Google Docs and Sites, which include features where users can share information with others or publicly. When users share information publicly, it may be indexable by search engines, including Google.

Google will not share personal information with companies, organizations and individuals outside of Google unless one of the following circumstances applies:

With parental or guardian consent. Google will share personal information with companies, organizations or individuals outside of Google when it has parents’ consent (for users below the age of consent), which may be obtained through G Suite for Education schools.

With Riverside Unified School District G Suite for Education accounts, because they are school-managed accounts, give administrators access to information stored in them.

For external processing. Google may provide personal information to affiliates or other trusted businesses or persons to process it for Google, based on Google’s instructions and in compliance with the G Suite for Education privacy notice and any other appropriate confidentiality and security measures.

For legal reasons. Google will share personal information with companies, organizations or individuals outside of Google if it has a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

• meet any applicable law, regulation, legal process or enforceable governmental request.

• enforce applicable Terms of Service, including investigation of potential violations.

• detect, prevent, or otherwise address fraud, security or technical issues.

• protect against harm to the rights, property or safety of Google, Google users or the public as required or permitted by law.

• Google also shares non-personal information -- such as trends about the use of its services -- publicly and with its partners.