Friday, 22 September 2017 08:31

Student Data Protection: Vendor Status

Written by
Rate this item
(0 votes)

Weber School District has transitioned this information to a new website.  This website offers more information and is complete and up to date.  Please use this link to access it :

https://sdpc.a4l.org/district_search.php?state=UT&districtID=6610

 

Weber School District, in compliance with HB 358 and SB 102, has initiated a strict policy and protocol procedure for evaluating all third-party vendors who have access to any student data.  Interactive websites and apps collect student data such as location, name, phone numbers, likes and dislikes, routines, and much more.  Because of this, Weber School District wants to protect student data, both submitted by the student and generated by these third-party companies.  The most common use of student data is in marketing and research, and for selling to companies for a profit.  Because of this, Weber School District requires all third-party vendors to sign a Memorandum of Agreement, which specifies that all student data will be transmitted and stored in a secure way, that it won't be sold, and that it will be fully deleted upon request.

In order for a third-party vendor to be approved, they must go through the evaluation steps:

  1. Teachers and Staff will submit the website/app to their Administrator
  2. If it is approved by their Administrator, then it will be submitted to the Student Data Security Manager (SDSM)
  3. The SDSM will go through the privacy policy and terms of service of each submitted website
  4. The SDSM will also view all security protocols listed for the website, including login security. 
  5. If the website is secure, then it will be turned over to Curriculum Department
  6. The Curriculum Department will go through all websites and determine if they are aligned with curriculum and if similar websites are already being used in the district
  7. Once the website/app is approved by the Curriculum Department, it will be routed back to the SDSM
  8. The SDSM will then send the company a personalized Contract for signature
  9. When the Contract is signed and returned to the SDSM, one of two things will happen:  A.  The website will be added to the approved list.  B.  The website will be turned over to development for login sync with district servers and then added to the approved list
  10. After websites are approved, their metadata will then be uploaded to SDPC Resource Registry

 

 

Read 18591 times Last modified on Tuesday, 05 November 2019 14:27