DATA SECURITY AND PRIVACY REQUIREMENTS
The law also requires that District contracts with third-party contractors that receive personally identifiable information (PII) must contain a signed bill of rights and supplemental information. In turn, each educational agency is required to publish on its website the Parents’ Bill of Rights and supplemental information for each software contract.
The Sherburne-Earlville Board of Education has established regulations regarding the protection of “personally identifiable information” of student and teachers/principal under Education Law §2-d and Part 121 of the Commissioner of Education; the protection of “private information” under State Technology Law §208 and the NY SHIELD Act; and procedures to notify persons affected by breaches or unauthorized access of protected information. Click the title links below for more information.
Education Law 2-d requires each NYS educational agency to publish its Data Privacy and Security Policy. SECSD’s policy is titled “Information and Data Privacy Security, Breach and Notification” and is posted under the “Technology Policies” heading on the right side of its Board of Education webpage.
Education Law 2-d requires each NYS educational agency to post supplemental information for each contract where a third-party contractor receives student data and/or teacher or principal data from SECSD. Click the title link to view the list of contracts to which this applies.