DATA PROTECTION OFFICER - Mike Gill
Student Data Privacy and Security
New York State Education Law Section 2-d requires that all school districts provide an inventory of programs used in the school environment on their websites and make such a document publicly available. Schools must also provide a clear description of the various data elements collected by the programs and applications including student, teacher and administrator Personally Identifiable Information (PII). In addition to the required information, more resources such as legal or regulatory documentation may be added to this public resource further outlining the reasons particular data elements are collected as well as the intended uses. You will find the inventory and a description of the programs currently in use in our schools with links to each company's privacy policies maintained by RIC One below. This public portal will be continuously updated as new security information is received or as new technological applications are integrated into the school environment.
Inventory of Applications in Use that are Compliant with NYS Education Law Section 2-D
Applications that are purchased through GST BOCES are covered under the GST BOCES Parents' Bill of Rights or Contracts available for review at: http://www.gstboces.org/documents/data-privacy/inventory/index.cfm
After reviewing this resource, if you have any questions, please feel free to email firstname.lastname@example.org
What Is RIC One?
RIC One is a program that consists of 12 Regional Information Centers (RICs) that helps with various services provided to schools. One such service, is the Data Privacy and Security Initiative tool for New York State districts to ensure compliance with Education Law 2-d and Family Educational Rights and Privacy Act (FERPA) requirements. RIC One serves as an intermediary for Districts by hosting the service and by acquiring the required documentation from the vendors. They also work to support educators in implementing technology-rich learning experiences while ensuring that students’ privacy is not compromised.