# data[].attributes.body
Student privacy needs to remain paramount to maintain the safety of students and their families. As teachers, the importance of grade privacy is stressed, but school principals face a new set of responsibilities. Handling privacy violations, discussing parent needs, and ensuring compliance all fall under the principal's purview. This guide is meant to serve as a reminder to principal candidates of the legal and ethical responsibilities of maintaining student privacy.

# data[].attributes.body
The U.S. Department of Education (DOE) is responsible for maintaining FERPA (20 U.S.C. § 1232) and the Protection of Pupils' Rights Act (20 U.S.C. § 1232 h). In addition, the DOE receives and investigates FERPA violation complaints, and then delegates local schools to remediate the issue.

The Federal Trade Commission regulates the Children's Online Privacy Protection Act (COPPA) which regulates website's collection of information from children under 13 (15 U.S.C. § 6501). While this is not directly tied to schools, it is important that school leaders are aware of privacy requirements, especially with the rise of education technology in classrooms.

# data[].attributes.body
FERPA (20 U.S.C. § 1232) protects students' educational records, as well as ensure parent's and student's rights to access or request corrections to their record.

Basic Tenets of FERPA

Any school that receives funding from the Department of Education has a responsibility to keep certain student information confidential

Only parents, eligible students, or school officials with an educational need can access educational records or personally identifiable information (PII)

Parents have the right to review or request changes to their child's educational record. While the school must provide access to the record in an appropriate amount of time, they have the right to deny the request, and inform the parent of their reason.

Schools must annually notify parents and eligible student of their rights under FERPA and discern the difference between PII and Directory Information, which is not considered harmful to share.

Schools must allow parents and students the option to opt out of disclosure of directory information.

(Dept. of Education, 2021).

# data[].attributes.attachment_link.description
The Office of the Federal Register publishes documents on behalf of Federal agencies but does not have any authority over their programs. We recommend you directly contact the agency responsible for the content in question.

# data[].attributes.body
The Texas Education Agency also enforces federal law through regulations for local school districts. For example, Texas Education code requires districts to disclose FERPA rights and their directory information policy within 10 days of the student's enrollment (19 Tex. Educ. Code §26.013).

In addition, the Texas Education Agency also regulates the Texas Student Privacy Act, which prohibits websites selling or using student data for targeted advertisements or to create a profile of their website activity (19 Educ. Code § 32.152).

# data[].attributes.body
Finally, local education agencies (school districts) are responsible for communicating students' and parents' right to privacy, as well as develop staff to maintain these rights through responsible practice. While knowledge of the federal law is important, school leaders need to be well aware of their district policies. This will aid them in resolving possible complaints, as well as make informed, responsible decisions.

# data[].attributes.body
While the right to privacy is not explicitly stated in the U.S. Constitution, it is frequently implied through several amendments. The First Amendment protects privacy of beliefs and thoughts (U.S. Const. amend. I) The Fourth protects the privacy of a person's property from unreasonable search and seizure (U.S. Const. amend. IV). The Ninth states "certain rights, shall not be construed to deny or disparage others retained by the people," which has been frequently cited in court cases as a reference to American's right to privacy (U.S. Const. amend. IX). Finally, the Fourteenth Amendment states that "No State shall... deprive any person of life, liberty, or property, without due process of law" (U.S. Const. amend. XIV). This amendment reinforces the idea that Americans' liberties include privacy.

The Texas Bill of Rights follows suit, in that the right to privacy is not explicitly stated, but implied. For example Section 8 states that Texans have the right to free speech, which implies the right to privacy of beliefs, much like the federal First Amendment (Tex. Const. art I. § 8). Also, Section 9 of the Texas Bill of Rights also protects one's property from search and seizure, much like the federal Fourth Amendment (Tex. Const. art I. § 9).

# data[].attributes.body
The DOE also regulates the Protection of Pupil Rights Amendment (20 U.S.C. § 1232h), which protects student privacy in school surveys, and allows parents to opt their child out of surveys or activities where directory information may be shared.

Parents must provide consent for their students to participate in government based surveys that concern the following areas:

political affiliations and beliefs

mental or psychological problems in the family

religious practices

Income, other than what is required by law

Sex behavior or attitudes

privileged relationships with lawyers, doctors, and ministers

This law also allows notice and inspections of upcoming surveys, physical examinations, or screenings furnished by the local education agency, Department of Education, or third party marketing organizations.

# data[].attributes.body
In the court case, Troxell v. Granville (530 U.S. 57, 2000), the supreme court ruled that the Fourteenth Amendment affords parents the rights to oversee the care, custody, and control of their child.

Parents have a right to determine who their child is exposed to, therefore one can infer that the right applies to the sharing of their child's information.

The case enforced the principle that parents are the primary decision makers for their children, and that government agencies cannot override that unless their is suspected abuse or mistreatment.

# data[].attributes.attachment_link.description
Troxel v. Granville: There is a fundamental right under the Fourteenth Amendment for a parent to oversee the care, custody, and control of a child.

# data[].attributes.body
The Department of Education regulates FERPA (34 C.F.R. § 99) and PPRA (34 C.F.R. § 98) and places certain requirements on schools to respect families rights to privacy. In addition, the Texas Student Privacy Act (19 Tex. Educ, Code § 32.154) is regulated by the Texas Education Agency to protect student's information from websites and advertising.

The law does not prohibit the sharing of information for the purpose of improving educational products or the user's educational experience.

In Section 32.152, prohibited use of student information is as follows:

to engage in targeted advertising based off of users information

to create a profile of the user's website history that is not related to school purposes

to sell or rent student's information to other parties or websites

# data[].attributes.attachment_link.readable_text
EDUCATION CODE



TITLE 2. PUBLIC EDUCATION



SUBTITLE F. CURRICULUM, PROGRAMS, AND SERVICES



CHAPTER 32. COMPUTERS, COMPUTER-RELATED EQUIPMENT, AND STUDENT INFORMATION PROTECTION



SUBCHAPTER A. POWERS AND DUTIES OF STATE BOARD OF EDUCATION RELATING TO ELECTRONIC INSTRUCTIONAL TECHNOLOGY AND COMPUTER-RELATED EQUIPMENT



Sec. 32.001. DEVELOPMENT OF LONG-RANGE PLAN. (a) The State Board of Education shall develop a long-range plan for:


(1) acquiring and using technology in the public school system;


(2) fostering professional development related to the use of technology for educators and others associated with child development;


(3) fostering computer literacy among public school students so that by the year 2000 each high school graduate in this state has computer-related skills that meet standards adopted by the board; and


(4) identifying and, through regional education service centers, distributing information on emerging technology for use in the public schools.


(b) The State Board of Education shall update the plan developed under Subsection (a) at least every five years.


(c) The State Board of Education, in coordination with the Texas Higher Education Coordinating Board and other public agencies and institutions the State Board of Education considers appropriate, shall propose legislation and funding necessary to implement the plan developed under Subsection (a).


(d) In developing the plan, the State Board of Education must consider accessibility of technology to students with disabilities.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Amended by:


Acts 2017, 85th Leg., R.S., Ch. 581 (S.B. 810), Sec. 32, eff. June 9, 2017.


Sec. 32.002. AUTHORITY OF SCHOOL DISTRICT. A school district is not required by this subchapter to acquire or use technology that has been approved, selected, or contracted for by the State Board of Education or the commissioner.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Sec. 32.003. AUTHORITY OF COMMISSIONER TO CONTRACT. The commissioner may contract with developers of technology to supply technology for use by school districts throughout this state.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Sec. 32.004. FEES. The State Board of Education, on the commissioner's recommendation, may establish a reasonable fee for services provided under this chapter.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


SUBCHAPTER B. STATEWIDE DEVELOPMENT OF TECHNOLOGY AND TELECOMMUNICATIONS



Sec. 32.031. PURPOSE. To prepare students for the 21st century, it is the policy of this state that a superior education should be available to all students under a thorough and efficient system of public education. Educational resources shall be devoted to the maximum extent possible to the instruction of students. To accomplish those purposes, public education must use, in a comprehensive manner, appropriate, accessible technology in all aspects of instruction, administration, and communication.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Sec. 32.032. ELECTRONIC INFORMATION SYSTEM. (a) The agency shall establish and maintain an accessible electronic information transfer system, as provided by State Board of Education policy, that is capable of transmitting information among school districts, regional education service centers, and other education-related entities and state agencies.


(b) The commissioner may contract with suppliers of computer hardware, software, or communications equipment or services to provide accessible goods or services to school districts, regional education service centers, or the agency. The State Board of Education by rule shall adopt standards for hardware, software, and communications equipment, training, and services supplied through contract under this section.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Sec. 32.033. INTEGRATED TELECOMMUNICATIONS SYSTEM. (a) The agency, in coordination with institutions of higher education and other public or private entities, may maintain and expand, as needed, the telecommunications capabilities of school districts and regional education service centers. The agency shall design and implement a telecommunications system for distance learning throughout the state.


(b) To the extent necessary, the State Board of Education shall conduct feasibility studies related to accessible telecommunications capabilities of school districts and regional education service centers.


(c) According to priorities determined by the State Board of Education, the commissioner may contract with a public broadcasting system or another supplier of telecommunications equipment, programming, training, or services to provide equipment, programming, training, or services to school districts, regional education service centers, or the agency.


(d) In providing additional telecommunications capabilities under Subsection (a), the agency shall give priority to school districts with limited financial resources.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995. Amended by Acts 2003, 78th Leg., ch. 201, Sec. 23, eff. Sept. 1, 2003.


Sec. 32.034. CENTER FOR EDUCATIONAL TECHNOLOGY. (a) The commissioner, as provided by State Board of Education policy, may enter into an interagency contract with a public institution of higher education or a consortium of public institutions of higher education in this state to sponsor a center for educational technology under this section.


(b) The purpose of the center is to improve the quality and efficiency of the educational process through research, development, or site evaluation of:


(1) existing and new applications of technology specifically designed for educational applications; and


(2) educational applications of technology originally developed for commercial or other purposes.


(c) The membership of the center shall consist of public school educators, regional education service centers, institutions of higher education, nonprofit organizations, and private sector representatives. The State Board of Education shall establish membership policies for the center.


(d) The board of directors of the center shall be appointed by the State Board of Education and shall consist of:


(1) representatives of the center, including members of the public education system;


(2) a representative of each sponsoring institution of higher education; and


(3) the commissioner or the commissioner's representative.


(e) The board of directors shall:


(1) employ a director for the center; and


(2) establish priorities for the center's activities.


(f) The director is responsible for the center's activities.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Amended by:


Acts 2015, 84th Leg., R.S., Ch. 1203 (S.B. 1455), Sec. 1, eff. September 1, 2015.


Sec. 32.035. DEMONSTRATION PROGRAMS. (a) The agency shall establish demonstration programs to:


(1) investigate the uses, effectiveness, and feasibility of technologies for education; and


(2) provide models for effective education using technology.


(b) The agency may design programs under Subsection (a) to encourage participation by and collaboration among school campuses, school districts, regional education service centers, the private sector, state and federal agencies, nonprofit organizations, and institutions of higher education.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


Sec. 32.036. PREVIEW CENTERS AND TRAINING PROGRAMS. The agency may establish and provide for the operation of a technology preview center and training program in each regional education service center to assist district and campus personnel in developing and maintaining the comprehensive use of appropriate technology in all aspects of instruction, administration, and communications.


Added by Acts 1995, 74th Leg., ch. 260, Sec. 1, eff. May 30, 1995.


For expiration of this section, see Subsection (d).



Sec. 32.037. GRANT PROGRAM FOR TRANSITION TO ELECTRONIC ADMINISTRATION OF ASSESSMENT INSTRUMENTS. (a) The commissioner may establish a matching grant program to ensure that all school districts and open-enrollment charter schools have the necessary infrastructure to administer assessment instruments electronically in accordance with the transition plan developed under Section 39.02341.


(b) In establishing the grant program, the commissioner may:


(1) set eligibility criteria to receive a matching grant under the program; and


(2) contract with developers of technology as necessary to ensure the most efficient and cost-effective implementation of Internet connectivity infrastructure for electronic administration of assessment instruments.


(c) In awarding grants under the grant program, the commissioner:


(1) shall prioritize applicants seeking funding for one-time investments in broadband network infrastructure; and


(2) if funds are available after grants are awarded to each eligible applicant described by Subdivision (1), may award grants to applicants seeking funding for annual bandwidth and personnel costs associated with electronic administration of assessment instruments.


(d) This section expires September 1, 2025.


Added by Acts 2021, 87th Leg., R.S., Ch. 1003 (H.B. 3261), Sec. 3, eff. June 18, 2021.


SUBCHAPTER C. TRANSFER OF DATA PROCESSING EQUIPMENT TO STUDENTS



Sec. 32.101. DEFINITION. In this subchapter, "data processing" has the meaning assigned by Section 2054.003, Government Code.


Added by Acts 2001, 77th Leg., ch. 1272, Sec. 6.01, eff. June 15, 2001.


Sec. 32.102. AUTHORITY. (a) As provided by this subchapter, a school district or open-enrollment charter school may transfer to a student enrolled in the district or school:


(1) any data processing equipment donated to the district or school, including equipment donated by:


(A) a private donor; or


(B) a state eleemosynary institution or a state agency under Section 2175.905, Government Code;


(2) any equipment purchased by the district or school, to the extent consistent with Section 32.105; and


(3) any surplus or salvage equipment owned by the district or school.


(b) A school district or open-enrollment charter school may accept:


(1) donations of data processing equipment for transfer under this subchapter; and


(2) any gifts, grants, or donations of money or services to purchase, refurbish, or repair data processing equipment under this subchapter.


Added by Acts 2001, 77th Leg., ch. 1272, Sec. 6.01, eff. June 15, 2001. Amended by Acts 2003, 78th Leg., ch. 1276, Sec. 9.020(f), eff. Sept. 1, 2003.


Amended by:


Acts 2011, 82nd Leg., 1st C.S., Ch. 4 (S.B. 1), Sec. 29.02, eff. September 28, 2011.


Sec. 32.103. ELIGIBILITY; PREFERENCE. (a) A student is eligible to receive data processing equipment under this subchapter only if the student does not otherwise have home access to data processing equipment, as determined by the student's school district or open-enrollment charter school.


(b) In transferring data processing equipment to students, a school district or open-enrollment charter school shall give preference to educationally disadvantaged students.


Added by Acts 2001, 77th Leg., ch. 1272, Sec. 6.01, eff. June 15, 2001.


Sec. 32.104. REQUIREMENTS FOR TRANSFER. Before transferring data processing equipment to a student, a school district or open-enrollment charter school must:


(1) adopt rules governing transfers under this subchapter, including provisions for technical assistance to the student by the district or school;


(2) determine that the transfer serves a public purpose and benefits the district or school; and


(3) remove from the equipment any offensive, confidential, or proprietary information, as determined by the district or school.


Added by Acts 2001, 77th Leg., ch. 1272, Sec. 6.01, eff. June 15, 2001.


Sec. 32.105. EXPENDITURE OF PUBLIC FUNDS. A school district or open-enrollment charter school may spend public funds to:


(1) purchase, refurbish, or repair any data processing equipment transferred to a student under this subchapter; and


(2) store, transport, or transfer data processing equipment under this subchapter.


Added by Acts 2001, 77th Leg., ch. 1272, Sec. 6.01, eff. June 15, 2001.


Sec. 32.106. RETURN OF EQUIPMENT. (a) Except as provided by Subsection (b), a student who receives data processing equipment from a school district or open-enrollment charter school under this subchapter shall return the equipment to the district or school not later than the earliest of:


(1) five years after the date the student receives the equipment;


(2) the date the student graduates;


(3) the date the student transfers to another school district or open-enrollment charter school; or


(4) the date the student withdraws from school.


(b) Subsection (a) does not apply if, at the time the student is required to return the data processing equipment under that subsection, the district or school determines that the equipment has no marketable value.


Added by Acts 2001, 77th Leg., ch. 1272, Sec. 6.01, eff. June 15, 2001.


SUBCHAPTER D. STUDENT INFORMATION



Sec. 32.151. DEFINITIONS. In this subchapter:


(1) "Covered information" means personally identifiable information or information that is linked to personally identifiable information, in any media or format, that is not publicly available and is:


(A) created by or provided to an operator by a student or the student's parent in the course of the student's or parent's use of the operator's website, online service, online application, or mobile application for a school purpose;


(B) created by or provided to an operator by an employee of a school district or school campus for a school purpose; or


(C) gathered by an operator through the operation of the operator's website, online service, online application, or mobile application for a school purpose and personally identifies a student, including the student's educational record, electronic mail, first and last name, home address, telephone number, electronic mail address, information that allows physical or online contact, discipline records, test results, special education data, juvenile delinquency records, grades, evaluations, criminal records, medical records, health records, social security number, biometric information, disabilities, socioeconomic information, food purchases, political affiliations, religious information, text messages, student identifiers, search activity, photograph, voice recordings, or geolocation information.


(2) "Interactive computer service" has the meaning assigned by 47 U.S.C. Section 230.


(3) "Operator" means, to the extent operating in this capacity, the operator of a website, online service, online application, or mobile application who has actual knowledge that the website, online service, online application, or mobile application is used primarily for a school purpose and was designed and marketed for a school purpose.


(4) "Parent" includes a person standing in parental relation.


(5) "School purpose" means a purpose that is directed by or customarily takes place at the direction of a school district, school campus, or teacher or assists in the administration of school activities, including instruction in the classroom or at home, administrative activities, and collaboration between students, school personnel, or parents, or is otherwise for the use and benefit of the school.


(6) "Targeted advertising" means presenting an advertisement to a student in which the advertisement is selected for the student based on information obtained or inferred over time from the student's online behavior, usage of applications, or covered information. The term does not include advertising to a student at an online location based on the student's visit to that location at that time, or in response to the student's request for information or feedback, without the retention of the student's online activities or requests over time for the purpose of targeting subsequent advertisements.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


Sec. 32.152. PROHIBITED USE OF COVERED INFORMATION. (a) An operator may not knowingly:


(1) engage in targeted advertising on any website, online service, online application, or mobile application if the target of the advertising is based on any information, including covered information and persistent unique identifiers, that the operator has acquired through the use of the operator's website, online service, online application, or mobile application for a school purpose;


(2) use information, including persistent unique identifiers, created or gathered by the operator's website, online service, online application, or mobile application, to create a profile about a student unless the profile is created for a school purpose; or


(3) except as provided by Subsection (c), sell or rent any student's covered information.


(b) For purposes of Subsection (a)(2), the collection and retention of account information by an operator that remains under the control of the student, the student's parent, or the campus or district is not an attempt to create a profile by the operator.


(c) Subsection (a)(3) does not apply to:


(1) the purchase, merger, or any other type of acquisition of an operator by another entity, if the operator or successor entity complies with this subchapter regarding previously acquired student information; or


(2) a national assessment provider if the provider secures the express affirmative consent of the student or the student's parent, given in response to clear and conspicuous notice, and if the information is used solely to provide access to employment, educational scholarships, financial aid, or postsecondary educational opportunities.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


Sec. 32.153. ALLOWED DISCLOSURE OF COVERED INFORMATION. (a) An operator may use or disclose covered information under the following circumstances:


(1) to further a school purpose of the website, online service, online application, or mobile application and the recipient of the covered information disclosed under this subsection does not further disclose the information unless the disclosure is to allow or improve operability and functionality of the operator's website, online service, online application, or mobile application;


(2) to ensure legal and regulatory compliance;


(3) to protect against liability;


(4) to respond to or participate in the judicial process;


(5) to protect:


(A) the safety or integrity of users of the website, online service, online application, or mobile application; or


(B) the security of the website, online service, online application, or mobile application;


(6) for a school, education, or employment purpose requested by the student or the student's parent and the information is not used or disclosed for any other purpose;


(7) to use the covered information for:


(A) a legitimate research purpose; or


(B) a school purpose or postsecondary educational purpose; or


(8) for a request by the agency or the school district for a school purpose.


(b) A national assessment provider or a provider of a college and career counseling service may, in response to a request of a student, and on receiving the express affirmative consent of the student or the student's parent given in response to clear and conspicuous notice, use or disclose covered information solely to provide access to employment, educational scholarships, financial aid, or postsecondary educational opportunities.


(c) An operator may disclose covered information if a provision of federal or state law requires the operator to disclose the information. The operator must comply with the requirements of federal and state law to protect the information being disclosed.


(d) An operator may disclose covered information to a third party if the operator has contracted with the third party to provide a service for a school purpose for or on behalf of the operator. The contract must prohibit the third party from using any covered information for any purpose other than providing the contracted service. The operator must require the third party to implement and maintain reasonable procedures and practices designed to prevent disclosure of covered information.


(e) Nothing in this subchapter prohibits the operator's use of covered information for maintaining, developing, supporting, improving, or diagnosing the operator's website, online service, online application, or mobile application.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


Sec. 32.154. ALLOWED USE OF COVERED INFORMATION. This subchapter does not prohibit an operator from:


(1) using covered information:


(A) to improve educational products if that information is not associated with an identified student using the operator's website, online service, online application, or mobile application; and


(B) that is not associated with an identified student to demonstrate the effectiveness of the operator's products or services and to market the operator's services;


(2) sharing covered information that is not associated with an identified student for the development and improvement of educational websites, online services, online applications, or mobile applications;


(3) recommending to a student additional services or content relating to an educational, learning, or employment opportunity within a website, online service, online application, or mobile application if the recommendation is not determined by payment or other consideration from a third party;


(4) responding to a student's request for information or for feedback without the information or response being determined by payment or other consideration from a third party; or


(5) if the operator is a national assessment provider or a provider of a college and career counseling service, identifying for a student, with the express affirmative consent of the student or the student's parent, institutions of higher education or scholarship providers that are seeking students who meet specific criteria, regardless of whether the identified institution of higher education or scholarship provider provides consideration to the operator.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.



Text of section effective until September 01, 2023



Sec. 32.155. PROTECTION OF COVERED INFORMATION. An operator must implement and maintain reasonable security procedures and practices designed to protect any covered information from unauthorized access, deletion, use, modification, or disclosure.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


Amended by:


Acts 2021, 87th Leg., R.S., Ch. 806 (H.B. 1525), Sec. 14, eff. September 1, 2023.



Text of section effective on September 01, 2023



Sec. 32.155. PROTECTION OF COVERED INFORMATION. (a) An operator must implement and maintain reasonable security procedures and practices designed to protect any covered information from unauthorized access, deletion, use, modification, or disclosure.


(b) Any operator that has been approved by the agency or had a product adopted by the agency and possesses any covered information must use the unique identifier established by the Texas Student Data System (TSDS) or a successor data management system maintained by the agency for any account creation, data upload, data transmission, analysis, or reporting to mask all personally identifiable student information. The operator shall adhere to a state-required student data sharing agreement that includes an established unique identifier standard for all operators as prescribed by the agency.


(c) In addition to including the unique identifier in releasing information as provided by Subsection (b), an operator may include any other data field identified by the agency or by a school district, open-enrollment charter school, regional education service center, or other local education agency as necessary for the information being released to be useful.


(d) A school district, open-enrollment charter school, regional education service center, or other local education agency may include additional data fields in an agreement with an operator or the amendment of an agreement with an operator under this section. An operator may agree to include the additional data fields requested by a school district, open-enrollment charter school, regional education service center, or other local education agency but may not require that additional data fields be included.


(e) A school district, open-enrollment charter school, regional education service center, or other local education agency may require an operator that contracts directly with the entity to adhere to a state-required student data sharing agreement that includes the use of an established unique identifier standard for all operators as prescribed by the agency.


(f) A national assessment provider who receives covered information from a student or from a school district or campus on behalf of a student is not required to comply with Subsection (b) or (e) if the provider receives the covered information solely to provide access to:


(1) employment, educational scholarships, financial aid, or postsecondary educational opportunities; or


(2) educational resources for middle school, junior high school, or high school students.


(g) The commissioner may adopt rules as necessary to administer this section.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


Amended by:


Acts 2021, 87th Leg., R.S., Ch. 806 (H.B. 1525), Sec. 14, eff. September 1, 2023.


Sec. 32.156. DELETION OF COVERED INFORMATION. If a school district requests the deletion of a student's covered information under the control of the school district and maintained by the operator, the operator shall delete the information not later than the 60th day after the date of the request, or as otherwise specified in the contract or terms of service, unless the student or the student's parent consents to the operator's maintenance of the covered information.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


Sec. 32.157. APPLICABILITY. This subchapter does not:


(1) limit the authority of a law enforcement agency to obtain any information from an operator as authorized by law or under a court order;


(2) limit the ability of an operator to use student data, including covered information, for adaptive learning or customized student learning purposes;


(3) apply to general audience:


(A) websites;


(B) online services;


(C) online applications; or


(D) mobile applications;


(4) limit service providers from providing Internet connection to school districts or students and students' families;


(5) prohibit an operator from marketing educational products directly to a student's parent if the marketing is not a result of the use of covered information obtained by the operator through providing services to the school district;


(6) impose a duty on a provider of an electronic store, gateway, marketplace, or other means of purchasing or downloading software or applications to review or enforce compliance with this subchapter on those applications or software;


(7) impose a duty on a provider of an interactive computer service to review or enforce compliance with this subchapter by third-party content providers;


(8) prohibit a student from downloading, exporting, transferring, saving, or maintaining the student's data or documents; or


(9) alter the rights or duties of the operator, provider, school, parent, or student under the Family Educational Rights and Privacy Act of 1974 (20 U.S.C. Section 1232g) or other federal law.


Added by Acts 2017, 85th Leg., R.S., Ch. 355 (H.B. 2087), Sec. 2, eff. September 1, 2017.


SUBCHAPTER F. EDUCATION INTERNET PORTAL



Sec. 32.258. STUDENT ASSESSMENT DATA; DATA PORTAL. (a) The agency shall establish and maintain a student assessment data portal for use by school districts, teachers, parents, students, and public institutions of higher education. The agency shall establish a secure, interoperable system to be implemented through the portal under which:


(1) a student or the student's parent or other person standing in parental relationship can easily access the student's individual assessment data;


(2) an authorized employee of a school district, including a district teacher, can readily access individual assessment data of district students for use in developing strategies for improving student performance; and


(3) an authorized employee of a public institution of higher education can readily access individual assessment data of students applying for admission for use in developing strategies for improving student performance.


(b) The system established under Subsection (a) shall provide a means for a student or the student's parent or other person standing in parental relationship to track the student's progress on assessment instrument requirements for graduation.


(c) The agency shall establish an interoperable system to be implemented through the portal under which general student assessment data is easily accessible to the public.


(d) Student assessment data provided under this section must:


(1) be available on or before the first instructional day of the school year following the year in which the data is collected; and


(2) include student performance data on assessment instruments over multiple years, beginning with the 2007-2008 school year, including any data indicating progress in student achievement.


(e) Each system established under this section must permit comparisons of student performance information at the classroom, campus, district, and state levels.


Added by Acts 2003, 78th Leg., ch. 1216, Sec. 16, eff. June 20, 2003.


Renumbered from Education Code, Section 32.158 by Acts 2007, 80th Leg., R.S., Ch. 921 (H.B. 3167), Sec. 17.001(13), eff. September 1, 2007.


Amended by:


Acts 2009, 81st Leg., R.S., Ch. 895 (H.B. 3), Sec. 49, eff. June 19, 2009.


SUBCHAPTER G. TECHNOLOGY LENDING PROGRAM GRANTS



Sec. 32.301. ESTABLISHMENT OF PROGRAM. (a) The commissioner may establish a grant program under which grants are awarded to school districts and open-enrollment charter schools to implement a technology lending program to provide students access to equipment necessary to access and use electronic instructional materials.


(b) A school district or an open-enrollment charter school may apply to the commissioner to participate in the grant program. In awarding grants under this subchapter for each school year, the commissioner shall consider:


(1) the availability of existing equipment to students in the district or school;


(2) other funding available to the district or school; and


(3) the district's or school's technology plan.


(c) The commissioner may determine the terms of a grant awarded under this section, including limits on the grant amount and approved uses of grant funds.


(d) The commissioner may recover funds not used in accordance with the terms of a grant by withholding amounts from any state funds otherwise due to the school district or open-enrollment charter school.


Added by Acts 2017, 85th Leg., R.S., Ch. 705 (H.B. 3526), Sec. 20, eff. June 12, 2017.


Sec. 32.302. FUNDING. (a) The commissioner may use not more than $25 million from the state instructional materials and technology fund under Section 31.021 each state fiscal biennium or a different amount determined by appropriation to administer a grant program established under this subchapter.


(b) The cost of administering a grant program under this subchapter must be paid from funds described by Subsection (a).


Added by Acts 2017, 85th Leg., R.S., Ch. 705 (H.B. 3526), Sec. 20, eff. June 12, 2017.


Amended by:


Acts 2019, 86th Leg., R.S., Ch. 467 (H.B. 4170), Sec. 5.005(b), eff. September 1, 2019.


Sec. 32.303. USE OF GRANT FUNDS. (a) A school district or open-enrollment charter school may use a grant awarded under Section 32.301 or other local funds to purchase, maintain, and insure equipment for a technology lending program.


(b) Equipment purchased by a school district or open-enrollment charter school with a grant awarded under Section 32.301 is the property of the district or school.


Added by Acts 2017, 85th Leg., R.S., Ch. 705 (H.B. 3526), Sec. 20, eff. June 12, 2017.

# data[].attributes.attachment_link.title
EDUCATION CODE CHAPTER 32. COMPUTERS, COMPUTER-RELATED EQUIPMENT, AND STUDENT INFORMATION PROTECTION

# data[].attributes.attachment_link.description
EDUCATION CODE TITLE 2. PUBLIC EDUCATION SUBTITLE F. CURRICULUM, PROGRAMS, AND SERVICES CHAPTER 32. COMPUTERS, COMPUTER-RELATED EQUIPMENT, AND STUDENT INFORMATION PROTECTION SUBCHAPTER A. POWERS AND DUTIES OF STATE BOARD OF EDUCATION RELATING TO ELECTRONIC INSTRUCTIONAL TECHNOLOGY AND COMPUTER-RELATED EQUIPMENT Sec. 32.001. DEVELOPMENT OF LONG-RANGE PLAN.

# data[].attributes.attachment_caption
Example of Local Districts Protection of FERPA and PPRA

# data[].attributes.body
School districts and their board of trustees are responsible for maintaining the right to privacy for families and students who attend their schools. Above is a link to a local school districts privacy policy included in their student handbook (DISD, 2024). The school district is legally required to notify families of their rights under FERPA, and allow families to completely opt out of public release of student information.

The district took the following steps in their school handbook to ensure compliance.

Informing parents of the difference between PII and Directory Information

Clearly stating the opt out policy

Providing clear examples of the types of directory information the district would share and why

# data[].attributes.attachment_link.title
2017-18 Annotated TASB Model Student Handbook

# data[].attributes.body
Many families may opt out of information disclosure due to safety needs, or personal beliefs. Respecting the beliefs and rights of all families is crucial in maintaining a positive school climate and best educating students. In order to best ensure legal compliance and avoid violation of student privacy, the school leader should take the following steps:

Annually review the school's directory information policy to ensure that it aligns with the law, the school's values, and needs of all stakeholders. In addition, conducting student data privacy audits can determine if there are any gaps in privacy compliance (Innovare, 2023).

Provide professional development training to all teachers and staff on the differences between PII and Directory information, as well as strategies for protecting student information. In addition, develop staff ability to recognize, report, and address privacy violations (Innovare, 2023).

Work with technology staff to ensure that online resources comply with student privacy laws. While educational website should already follow the law, reviewing their compliance and creating a list of appropriate websites can further protect student data (Thompson, 2023).

# data[].attributes.body
The Texas Educators' Code of Ethics states that educators have the responsibility to uphold the all local, state, and federal laws, as well as act in the best interest of students. Standard 3.1 of the code states, "The educator shall not reveal confidential information concerning students unless disclosure serves lawful professional purposes or is required by law" (TEA, 2018). Student information should only be shared to those with an educational interest in the child. Teachers, staff, and school leaders all have the obligation to uphold the laws previously stated to protect student privacy. As a principal, it is important to not only uphold yourself to the standards set forth, but to ensure that your staff will as well.

# data[].attributes.headline
Slide 10: Personal Connection to the Standards

# data[].attributes.subject
Slide 10: Personal Connection to the Standards

# data[].attributes.body
As a teacher in a small town, I understand the importance of maintaining student privacy. Many families are experiencing hardships and difficulties that affect student performance, or require discretion of their student's information. On top of that, the rights of student privacy can be easily crossed, due to unclear policy, gossip, or good-intentioned, yet illegal, sharing of information. While teachers are trained in the aspects of keeping grades and identifiable information private, they may be unaware of the more nuanced details of the law, such as Directory Information for FERPA and the Protection of Pupils Rights Act. I hope to not only maintain the high standards of student privacy as a principal, but also exemplify and provide guidance to my future teachers and staff. Legal and ethical principles lay the foundation in educational and leadership practices. A solid foundation ensures that decisions are rooted in best practice, and benefit all stakeholders in the school.

# data[].attributes.headline
Slide 11: Recommendations for Best Practice

# data[].attributes.subject
Slide 11: Recommendations for Best Practice

# data[].attributes.body
In leading a school, principals will face opportunities to maintain a student's right to privacy. Through careful planning and consideration of legal and ethical standards, the principal can make decisions to benefit all students. The following actions can help plan and ensure a secure school environment.

Determine a designated person to handle student privacy concerns. This can be a campus or district administrator with specific knowledge and training in the area, or in smaller districts, the campus principal. A designated expert in the field ensures that teachers receive consistent guidance on student privacy related issues.

Create and communicate a school vision that ensures safety for all students. For many families, privacy of certain information equates to safety. The development and communication of your school vision should reflect respect for your families needs, as well as create a comfortable environment of trust.

Discern the difference between PII and Directory Information. Some families, teachers, and staff may be unaware of certain parts of FERPA, PPRA, or the Texas Student Privacy Act. Schools can share resources to ensure that families are fully aware of the liberties that are afforded for them and their students.

Develop a clear plan of community communication. Some families may be uncomfortable with certain communications that share their child's work, such as newspaper publications or social media posts. Having a plan of possible ways that directory information could be shared allows parents to make informed decisions on whether to opt out or not. Then communicate this to parents in multiple ways to ensure understanding. In addition, the privacy policy should be clearly accessible year round for reference.

Ensure that administrative staff have the proper resources to ensure organized record keeping. Most parents exercise their right to privacy while registering their child for school, and keeping those records accessible allows easy reference when planning campus communication involving students.

Be ready to communicate effectively and calmly with parents with concerns about their student's safety and privacy. Privacy is a sensitive topic for many families and maintaining an even keel approach can assure them you care and are on the same side. Circling back to the accessible privacy policy and resources can also be helpful in mitigating parent conversations.

# data[].attributes.body
Children’s Online Privacy Protection Act, 15 U.S.C. § 6501

Dublin Independent School District. (2024). Student handbook 2024-2025.  https://resources.finalsite.net/ images/v1727856580/dublink12txus/ad98qtbtms5cwqyyr8dr/2024-2025studenthandbook.pdf

Family Educational Rights and Privacy Act, 20 U.S.C. § 1232

Innovare. (2023, May 11). 7 best practices for student data security and privacy compliance.  https://innovaresip.com/blog/student-data-privacy-bestpractices/#:~:text=Understanding

%20legal%20requirements%20for%20student,Key%20takeaways

19 Tex. Educ. Code §26.013

Protection of Pupils’ Rights Act, 20 U.S.C. § 1232

Student Privacy Policy Office. (2021, July 9). A parent guide to the family educational rights and privacy act (FERPA). U.S. Department of Education. https://studentprivacy.ed.gov/sites/default/files/resource_document/file/A%20parent%20

guide%20to%20ferpa_508.pdf

Texas Education Agency. (2018). Texas educators’ code of ethics. https://tea.texas.gov/about-tea/laws-and-rules/sbec-rules-tac/sbec-tac-currently-in-effect/

ch247.pdf

Texas Student Privacy Act, 19 Educ. Code § 32.152

Thompson, R. (2023, March 15). 6 steps to protect student data privacy. Edutopia. https://www.edutopia.org/article/protecting-student-data-privacy/

Troxell v. Granville, 530 U.S. 57, (2000). https://supreme.justia.com/cases/federal/us/530/57/#:~:text=The%20Superior%20Court%20ordered%20more,right%20to%20rear%20their%20children.