I just gave a brief presentation at the 1st International Congress on Democratic Digital Education and Open Edtech in Barcelona (remotely), on how the Parent Coalition began and how our fight continues.
We also engaged in a brief discussion about how the pandemic has undermined student learning & privacy thru the expanded use of online products – but push to privatize schooling via ed tech started before pandemic & sadly will continue long after its over.
A presentation we recently gave to the Data Privacy Advisory Committee of the NY State Education Department on the history of the NY State student privacy law, Education Law 2d, beginning with inBloom Inc. and the continuing problems with lack of compliance and enforcement.
On May 6, the NY Post revealed that about two million students in NY State alone may have had their privacy violated by the massive Illuminate data breach; students in CT and CO were also affected.
This is an update from reporting in The Journal, based on FOILed records from NYSED that found at least one million students affected, across 24 school districts and 18 charter schools in New York, plus one Board of Cooperative Educational Service .
The NY State Education Dept. and the NYC DOE need to do a far better job protected personal student data and complying with the NY State Student privacy law 2D, which was passed in 2014, and to minimize the sharing of student data, ensuring strict security standards including encryption, and requiring that vendors delete it as soon as possible and at the very least when students graduate, none of which happened here.
Illuminate has reported that the hackers accessed a ” database storing some information in unencrypted format “, according to the The Record news site, and that the data may have included student and parent names, email addresses, grades, attendance, birth dates, ID numbers, genders, race and ethnicity, languages spoken at home, Title I and disability status and more. Data from the records of students in Colorado and Connecticut may also have breached.
Last weekend, Leonie Haimson, co-chair of the Parent Coalition for Student Privacy and Doug Levin, Co-Founder and National Director, K12 Security Information Exchange and a national expert on student data breaches, gave presentations at the Network for Public Education national conference in Philadelphia, in which we discussed the Illuminate Breach and the how districts and schools can better protect the privacy of their students and teachers.
Below are the videos of the this session, separated into Part I and Part II, along with questions and comments from the audience, and their power point presentations.
If you’d like to send your own letter to your members of Congress, urging them to oppose this privacy-invasive data collection by the federal government, please do so now by clicking here.
With little public notice and no hearings, the US House of Representatives passed the College Transparency Act on Feb. 4, embedded in a much larger bill called the America Competes Act. The bill will now go to conference with the Senate. You can read the bill here, starting on p. 30. The CTA would authorize the federal government to collect the personal information of every student enrolled in college or another higher education institution, and track them through life.
Today, the Parent Coalition for Student Privacy, along with several other prominent privacy and education groups listed below, sent the following letter to Congress, urging them not to approve this bill which would create an invasive and risky federal surveillance system, without any ability for students to opt out of the system or have their data deleted. If you’d like to send your own letter to your members of Congress, please do so now by clicking here.
On February 17, the Student Privacy Policy Office (SPPO) and the Privacy Technical Assistance Center (PTAC) of the US Department of Education held a “listening session” with representatives from a few privacy advocacy groups as well as some organizations funded by the ed tech industry. The most vocal participants urging stronger enforcement of federal student privacy laws were Cassie Creswell and I, co-chairs of the Parent Coalition for Student Privacy, and Joel Schwarz and Andrew Liddell of the Student Data Privacy Project.
Kevin Herms, Chief Privacy Officer and Director of SPPO, and Ross Lemke, Manager of PTAC, encouraged the participants to send follow-up letters to summarize their concerns. Our letter detailing some of them is below. Joel Schwarz’s follow-up letter is posted on his LinkedIn page.
Hopefully the strong discontent expressed by several participants of this “listening session” will lead to stronger and more effective action by the US Department of Education, which is in charge of enforcing our critical federal student privacy laws including FERPA, PPRA, and COPPA, but too often seems to be sleeping at the wheel.