The District has a legal responsibility to maintain the confidentiality of student records. As part of this responsibility, the Superintendent or designee will ensure that eligible students and parents/guardians have the right to inspect and review education records, the right to seek to amend education records, and the right to have some control over the disclosure of information from the education record. The procedures for ensuring these rights shall be consistent with state and federal law, including the Family Educational Rights and Privacy Act of 1974 (FERPA) and its implementing regulations.
The District will ensure the orderly retention and disposition of the District’s student records in accordance with Schedule LGS-01, Records Retention and Disposition Schedule.
The District will use reasonable methods to provide access to student educational records only to those authorized under the law and to authenticate the identity of the requestor. The District will document requests for and release of records, and retain the documentation in accordance with law. Furthermore, the District will execute agreements with third party contractors and consultants who collect, process, store, organize, manage, or analyze student personally identifiable information (PII) to ensure that the contractors/consultants comply with the law in using appropriate means to safeguard the data.
The Superintendent shall be responsible for ensuring that all requirements under law and the Commissioner’s regulations are carried out by the District.
Definitions
Authorized Representative: an authorized representative is any individual or entity designated by a State or local educational authority or a Federal agency headed by the Secretary, the Comptroller General, or the Attorney General to carry out audits, evaluations, or enforcement or compliance activities relating to educational programs.
Education Record: means those records, in any format, directly related to the student and maintained by the District or by a party acting on behalf of the District, except:
(a) records in the sole possession of the individual who made it and not accessible or revealed to any other person except a substitute (e.g. memory
joggers);
(b) records of the District’s law enforcement unit;
(c) grades on peer-graded papers before they are collected and recorded by a teacher.
Eligible student: a student who has reached the age of 18 or is attending postsecondary school.
Legitimate educational interest: a school official has a legitimate educational interest if they need to review a student’s record in order to fulfill their professional responsibilities.
Personally identifiable information (Student): information that would allow a reasonable person in the school or its community, who does not have personal knowledge of the relevant circumstances, to identify the student with reasonable certainty. Such data might include social security number, student identification number, parents’ names and/or addresses, a biometric record, etc.
School official: a person who has a legitimate educational interest in a student record who is employed by the District as an administrator, supervisor, instructor, or support staff member (including health or medical staff and law enforcement unit personnel); the Board of Education; a person or company with whom the District has contracted to perform a special task (such as an attorney, auditor, medical consultant, insurance company, therapist, or service provider); or a parent or student serving on an official committee, such as a disciplinary or grievance committee, or assisting another school official performing his or her tasks.
Third party contractor/consultant: any person or entity, other than an educational agency, that receives student data or teacher or principal data from an educational agency pursuant to a contract or other written agreement for purposes of providing services to such educational agency, including, but not limited to, data management or storage services, conducting studies or audits or evaluations of publicly funded programs.
Annual Notification
At the beginning of each school year, the District will publish a notification that informs parents/guardians and students currently in attendance of their rights under FERPA and the procedures for exercising those rights. A “Parents’ Bill of Rights for Data Privacy and Security” will be posted on the District website and included in any agreements with third party contractors/consultants. The notice and “Bill of Rights” may be published in other appropriate publications as well. This notice may be published in a newspaper, handbook, or other school bulletin or publication. This notice and “Bill of Rights” will also be provided to parents/guardians and students who enroll during the school year.
The notice will include a statement that the parent/guardian or eligible student has a right to:
1. inspect and review the student’s education records;
2. request that records be amended to ensure that they are not inaccurate, misleading, or otherwise in violation of the student’s privacy rights;
3. consent to disclosure of personally identifiable information contained in the student’s education records, except to the extent that FERPA authorizes disclosure without consent; and
4. file a complaint with the United States Department of Education alleging failure of the district to comply with FERPA and its regulations and/or file a complaint regarding a possible data breach by a third party contractor/consultant with the District and/or the New York State Education Department’s Chief Privacy Officer for failure to comply with state law.
The annual notice and “Bill of Rights” will inform parents/guardians and students:
1. that it is the District’s policy to disclose personally identifiable information from student records, without consent, to other school officials within the District whom the District has determined to have legitimate educational interests. The notice will define “school official” and “legitimate educational interest.”
2. that upon request, the District will disclose education records without consent to officials of another school district in which a student seeks to or intends to enroll or is actually enrolled.
3. that personally identifiable information will be released to third party authorized representatives for the purposes of educational program audit, evaluation, enforcement, or compliance purposes.
4. that the District, at its discretion, releases directory information and limited directory information (see definitions below) without prior consent, unless the parent/guardian or eligible student has exercised their right to prohibit release of the information without prior written consent. The District will not sell directory information.
5. that upon request, the District will disclose a high school student’s name, address, and telephone number to military recruiters and institutions of higher learning unless the parent or secondary school student exercises their right to prohibit release of the information without prior written consent.
6. of the procedure for exercising the right to inspect, review, and request amendment of student records.
7. that the District will provide information as a supplement to the “Parents’ Bill of Rights” with third parties with which the District contracts that use or have access to personally identifiable student data.
For a complete list of exceptions to FERPA’s prior consent requirements, see accompanying regulation 5500-R.
The District shall effectively notify parents, guardians, and students who have a primary or home language other than English.
In the absence of the parent/guardian or secondary school student exercising their right to opt out of the release of information to the military, the District is required to, under federal law, release the information indicated in number “5” above.
Student Directory Information and Limited Directory Information
Directory information is information that generally would not be considered harmful if released from a student’s record. Limited directory information means that the District may limit disclosure of its designated directory information to specific parties, for specific purposes, or both. The release of directory information and limited directory information is permissive, at the discretion of the Superintendent or designee.
The District has the option, under FERPA, of designating certain categories of student information as student “directory information.” The Board designates the following as “directory information”:
Student’s name
Parents’/Guardians’ names
School of attendance
Grade level
Participation in school activities or sports
Weight and height of certain athletic team members, only when included on athletic rosters
Honors and awards received
Photographs and videos for in-school viewing, school publications and for broadcast media
In addition to the above designated “directory information,” the Board designates the following information as “limited directory information,” which may be released only to students, parents/guardians, PTAs, education foundations, and other school-related organizations:
Student’s address
Student’s telephone number
Student’s school email address
Parents’/Guardians’ email addresses
ID number, user ID or other unique personal identifier used by a student for purposes of accessing or communicating in electronic systems, but only if the ID cannot be used to gain access to education records except when used in conjunction with one or more factors that authenticate the student’s identity.
Social security numbers or other personally identifiable information will not be considered directory information. Information about a homeless student’s living situation will be treated as a student educational record, and will not be deemed directory information. A parent/guardian or eligible student may elect, but cannot be compelled, to consent to release of a student’s address information in the same way they would for other student education records. If parents/guardians and students opt out of having directory information shared, the student will still be required to wear, display, or disclose their student ID cards.
Prior to the release of limited directory information, as described above, to any school-related organization, such organization shall, if requested, provide to the Superintendent or designee, in writing, for approval, the intended purpose and distribution for the limited directory information. Other than the approved purpose and distribution, the school-related organization shall be required to sign a statement warranting that the limited directory information provided shall not be released or disseminated in any manner to any third party, including any individual, organization or municipality. Failure to comply with this requirement will result in the District not releasing any directory or limited directory information to such organization.
Once the proper FERPA notification is given by the District, a parent/guardian or student will have ten (10) business days to notify the District of any objections they have to the release of “directory information” and “limited directory information.” If no objection is received, the District may release this information without prior approval of the parent/guardian or student for the release. Once the student or parent/guardian provides the “opt-out,” it will remain in effect after the student is no longer enrolled in the District.
The District may elect to provide a single notice regarding both directory information and information disclosed to military recruiters and institutions of higher education.
Cross Ref: 5151 Education of Students in Temporary Housing and Unaccompanied Youth
8635 Information and Data Privacy, Security, Breach and Notification
Ref: Family Educational Rights and Privacy Act, 20 USC 1232g; 34 CFR Part 99
No Child Left Behind Act, 20 USC §7908 (Military Recruiter Access)
10 USC §503 as amended by §544 of the National Defense Reauthorization Act for FY 2002
Education Law § 225
Public Officers Law §87(2)(a)
Arts and Cultural Affairs Law, Article 57-A (Local Government Records Law) 8 NYCRR 185.12 (Appendix I), Schedule LGS-1
for Use by School Districts and BOCES
“Guidance for Reasonable Methods and Written Agreements”
Family Policy Compliance Office website
Adoption date: December 1, 1995
Amended date: December 16, 2019
Amended date: September 18, 2023