FERPA CHECKLIST
- Never download unauthorized documents from random websites to avoid data breaches
- Keep database passwords in a secure place
- Remember to log out when leaving the workplace and don’t access the school database using an insecure network
- Never share student information with unauthorized others or post this information in public places
- Make sure to obtain signed and written consent from a student before releasing personally identifiable information (PII) to any employer, third party or resume referral database.
- Advise students annually about their rights under FERPA
- Conduct timely communications to students about the latest disclosure policy
CIPA CHECKLIST
- Maintain a technology protection measure that filters or blocks obscene or inappropriate images from computers with internet access
- Web filtering is incorporated within the service provided by your Internet Service Provider
- Web filtering is enabled on all networked devices through an on-premise appliance or hosted software application
- Access by minors to inappropriate content and matter on the Internet will be blocked
- Obscene
- Child Pornography
- An Internet Safety Policy must be created and implemented.
- Filtering will be provided for all Internet-enabled computers used by students, patrons, and staff.
- Filtering will be disabled only for bona fide research or other lawful purposes conducted by adults
- A public hearing must be held to discuss and adopt the Internet Safety Policy and the technology protection measure.
COPPA CHECKLIST
- Ensure that all websites or online services, or portions thereof, directed to children under 13 comply with COPPA when collecting or using any personal information from children.
- Generally, treat all visitors as children under 13 if your website or online service is primarily directed to children under 13.
- Comply with the COPPA Rule at a general audience sites when you obtain actual knowledge that you are collecting personal information directly from children under 13.
- Implement a neutral age screen at any website or online service secondarily directed to children prior to collecting any personal information from any visitor.
- Adopt technology, such as a session or timed cookie, to prevent a child from hitting the back button and changing his or her age after age-screening.
- Post a written privacy policy that complies with COPPA.
SUMMARY
Family Educational Rights and Privacy Act protects the privacy of students and parents, the right to inspect and review education records, right to request amendment of education records and restrictions on disclosure of information. CIPA compliance is fairly simple and straightforward. The main purpose is to maintain a technology protection measure that filters or blocks obscene or inappropriate images from computers with internet access. The COPPA rules require that as a school we must post a clear and comprehensive online privacy policy describing our information practices for personal information collected online from children. Also, we are compelled to provide direct notice to parents and obtain verifiable parental consent.
References
https://www.lcc.leg.mn/lcdp/meetings/09192017/2017-FERPA-DPA-Presentation-for-DPC-9-19-17.pdf
https://www.jhsph.edu/offices-and-services/student-affairs/ferpa.html
