Davis School District has detailed its multi-layered approach to student data privacy through its official school portals, outlining a framework built on legal compliance, system compatibility, and rigorous procurement controls. The district's policy emphasizes the protection of student information through adherence to state and federal statutes, including the Student Data Protection Act (SDPA) and the Family Educational Rights and Privacy Act (FERPA).
Core Privacy Pillars
The district's privacy strategy is centered on several core pillars: compliance with privacy and procurement laws, compatibility with existing district systems, care for student data, connections to instructional practices, and the communication of third-party data sharing to the community. Additionally, the district implements cost controls that follow state procurement laws to manage digital resources.
To facilitate transparency, Davis School District provides public and employee-facing portals for approved educational tools. These web pages allow stakeholders to verify which software and applications have met the district's rigorous standards for security and privacy before being used in classrooms.
Legal and Regulatory Framework
The district's regulatory framework incorporates a wide range of federal and state mandates. These include the Protection of Pupil Rights Amendment (PPRA), which provides templates for parental permission regarding specific sites and applications, and the Government Data Protection Act (GDPA). The district also adheres to the Student Data Privacy Consortium (SDPC) standards to manage data sharing agreements.
In addition to federal protections, the district's policies are aligned with the Utah State Board of Education (USBE) student data privacy requirements and the Utah Office of Administrative Rules. This legal structure is supported by specific documents such as the Student Data Disclosure protocols and a formal Data Governance Plan.
Data Collection and Retention
Specific notices are maintained to address various types of data collection and retention. The district provides a Biometric Data Collection Notice, as well as notices regarding student data collection and website privacy. For communication purposes, the district maintains Terms of Service for SMS text messaging for specifically selected school programs, ensuring that both students and parents understand how mobile communications are handled.
To manage information over time, the district follows a formal Record Retention Schedule established by Davis School District, which also references the retention schedules set by the USBE. This ensures that all student and district records are kept or destroyed in accordance with legal mandates.
Staff Training and Responsibilities
The district has established clear responsibilities for staff members involved in the handling of sensitive information. Training requirements are outlined for teachers, administrators, the Student Data Privacy Manager, and Information Data Managers. These roles are tasked with maintaining the integrity of the district's data protection protocols.
Furthermore, the district provides resources for managing individual privacy rights, such as the Directory Information Withhold Request process. Other available documentation includes the FERPA Annual Notice, the FERPA Employee Handout, and specific notices regarding employee data privacy.
Security Infrastructure
In addition to instructional tools, the district maintains an IT Security Plan to safeguard its digital infrastructure. The comprehensive nature of these policies is reflected in the variety of forms and notices available, ranging from Data Collection Notices to assessments for the department and staff-specific privacy documentation.
