Skip to main content

Canandaigua City School District

One Community, Transforming Lives

Parents Bill of Rights

Exhibit 3265-E


PARENTS’ BILL OF RIGHTS FOR STUDENT DATA PRIVACY AND SECURITY


The Canandaigua City School District, in recognition of the risk of identity theft and unwarranted invasion of privacy, affirms its commitment to safeguarding student personally identifiable information (PII) in educational records from unauthorized access or disclosure in accordance with State and Federal law. Pursuant to Education Law Section 2-d and the associated regulations (Part 121), the Canandaigua City School District establishes the following parental bill of rights:

  • A student's personally identifiable information (PII) cannot be sold or released by the Canandaigua City School District for any marketing or commercial purposes;
  • Parents have the right to inspect and review the complete contents of their child's education record. This right of inspection is consistent with the requirements of the Family Educational Rights and Privacy Act(FERPA) and the District’s policies (for more information about how to exercise this right, see 5500-R);
  • State and federal laws such as Education Law § 2-d; the Commissioner of Education’s Regulations at 8 NYCRR Part 121, the Family Educational Rights and Privacy Act ("FERPA") at 12 U.S.C. 1232g (34 CFR Part 99); Children's Online Privacy Protection Act ("COPPA") at 15 U.S.C. 6501-6502 (16 CFR Part 312); Protection of Pupil Rights Amendment ("PPRA") at 20 U.S.C. 1232h (34 CFR Part 98); the Individuals with Disabilities Education Act (“IDEA”) at 20U.S.C. 1400 et seq. (34 CFR Part 300); protect the confidentiality of a student’s identifiable information.
  • State and federal laws protect the confidentiality of students’ personally identifiable information. Safeguards associated with industry standards and best practices, including but not limited to encryption, firewalls, and password protection, must be in place when data is stored or transferred;
  • A complete list of all student data elements collected by the State is available for public review athttp://www.p12.nysed.gov/irs/sirs/documentation/NYSEDstudentData.xlsx or by writing to: Office of Information & Reporting Services, New York State Education Department, Room 863 EBA, 89 Washington Avenue, Albany, NY 12234; and
  • Parents have the right to have complaints about possible breaches and unauthorized disclosures of student data addressed. Complaints should be directed to the Data Protection Officer using the complaint form from the District’s Data Privacy and Security web page. Forms may be submitted by email to the Data Protection Officer, Dan Bowman, at bowmand@canandaiguaschools.org, or delivered to the District Office (143 North Pearl Street, Canandaigua, NY 14424). Complaints can also be directed to the New York State Education Department online at https://www.nysed.gov/data-privacy-security, by mail to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234, or by email toprivacy@mail.nysed.gov or by telephone at 518-474-0937.

APPENDIX A
Supplemental Information Regarding Third-Party Contractors

In the course of complying with its obligations under the law and providing educational services to District residents, the Canandaigua City School District has entered into agreements with certain third-party contractors. Pursuant to these agreements, third-party contractors may have access to "student data" and/or "teacher or principal data," as those terms are defined by law and regulation.
For each contract or other written agreement that the District enters into with a third-party contractor where the third-party contractor receives student data or teacher or principal data from the District, the following supplemental information will be included with this.

Bill of Rights:

  1. The exclusive purposes for which the student data or teacher or principal data will be used by the third-party contractor, as defined in the contract;
  2. How the third-party contractor will ensure that the subcontractors, or other authorized persons or entities to whom the third- party contractor will disclose the student data or teacher or principal data, if any, will abide by all applicable data protection and security requirements, including but not limited to those outlined in applicable laws and regulations (e.g., FERPA; Education Law Section 2-d);
  3. The duration of the contract, including the contract’s expiration date, and a description of what will happen to the student data or teacher or principal data upon expiration of the contract or other written agreement (e.g., whether, when, and in what format it will be returned to the District, and/or whether, when, and how the data will be destroyed);
  4. If and how a parent, student, eligible student, teacher, or principal may challenge the accuracy of the student data or teacher or principal data that is collected;
  5. Where the student data or teacher or principal data will be stored, described in a manner as to protect data security, and the security protections taken to ensure the data will be protected and data privacy and security risks mitigated; and
  6. Address how the data will be protected using encryption while in motion and at rest.

Click Here to Review Individual Vendor 2d Agreements for Canandaigua City School District

APPENDIX B
Additional Information & Resources on Student Data Privacy Protection

If you would like more information, please contact: Dan Bowman, Director of Technology, 143 N. Pearl St., Canandaigua, NY 14424; (585)396-3700; bowmand@canandaiguaschools.org


We also invite you to visit our website at https://www.canandaiguaschools.org/data-privacy-and-security for resources and additional information on Data Privacy and Security.


Revised: 7/2023