Data Privacy and Security

This page is designed to provide parents & families with information and processes related to student data privacy and security in accordance with New York State Education Law 2D. This includes the CCSD Data Privacy and Security Policy, the Parent's Bill of Rights, Data Privacy Complaint Process and links to vendor contracts and assurances regarding the responsible use of your student's information.

Canandaigua City School District Data Privacy and Security

Data Protection Officer- Daniel Bowman, Director of Technology - 585-396-3700 -

Parent's Bill of Rights

The purpose of the Parents’ Bill of Rights is to provide information to parents, legal guardians, those in parental relation to students and eligible students (age 18 and older) about certain legal requirements that protect personally identifiable (PII) information pursuant to state and federal laws.

Complaint Form for Unauthorized Data Disclosure / Data Breach

Data Security and Privacy, Policy 3390

In compliance with New York State's Education Law 2-d(Ed Law2d)

Student Records, Policy 3265

In compliance with the Family Educational Rights and Privacy Act (FERPA)

FERPA Annual Notice with Student Directory information and Opt-Out

Notification to parents/guardians and students 18 or older about their rights under the Family Educational Rights and Privacy Act (FERPA), including the district's designated directory information, military and higher education exceptions, and opt-out procedures

Click here for Directory and Recruitment Opt-Out form

Student Privacy, Policy 3260

This Policy is intended to state and affirm the parental rights afforded by the Protection of Pupil Rights Amendment (PPRA) which governs the administration to students of a survey analysis, or evaluation

PPRA Annual Notice

Protection of Pupil Rights Amendment (PPRA) affords parents of elementary and secondary students certain rights regarding the conduct of surveys, collection and use of information for marketing purposes, and specific physical exams.

PPRA Protected Scheduled Activities
Internet Safety, Policy 3060

In compliance with the Children's Internet Protection Act (CIPA)

Acceptable Use of Computer System, Policy 2070

CCSD Third Party Vendors

Education Law 2-d requires each educational agency to post Supplemental Information for each contract where a third party contractor receives student data and/or teacher or principal data from CCSD.

CCSD Vendor Agreement

The CCSD contracts to which the publication requirement applies can be found in the link below.

Canandaigua District Software Inventory