# data[].attributes.body
As a soon to be educator, my main priority is to protect and educate my students. As the ALA states that challenging and banning books can be due to offensive language, sexually explicit content, or not age appropriate for any group. These are 3 key aspects that keep our students safe however, there are many books that I grew up reading and/or read in middle school and high school are currently banned now. I feel like there could be arguments that defend these books and it leads me to wonder if people have expressed arguments about any banned books.

# data[].attributes.headline
How does this affect teachers and their instruction? 

# data[].attributes.subject
How does this affect teachers and their instruction? 

# data[].attributes.body
There are many sites that a teacher would be able to use but the students can not. For example Wakelet, this is because it may ask a child for their name, email, etc. It also tracks interactions, likes, comments and so much more. Anything that could risk the privacy of a student's records would violate FERPA. This means that educators must be cautious of what websites they use and especially their students.

# data[].attributes.headline
Appropriate online platforms for students to use:

# data[].attributes.subject
Appropriate online platforms for students to use:

# data[].attributes.attachment_caption
Youtube - another useful and common website teachers use however there could be restrictions

# data[].attributes.attachment_link.title
Protecting Student-Data Privacy: An Expert's View

# data[].attributes.body
This author gives several examples of how much data campuses collect just within our daily routines. (P.S. it's a lot!)

# data[].attributes.attachment_link.readable_text
In November 2021, the first higher education cohort of the Future of Privacy Forum Train-the-Trainer Program concluded. The Train-the-Trainer program for higher education seeks to multiply people on the ground who can provide basic student privacy support. The author prepared this guest blog as part of her final course project. Guest blogs and comments represent the diversity of opinion within higher education about data privacy issues. The views and opinions expressed in this blog are the author's and do not necessarily reflect those of the Future of Privacy Forum.
Merriam-Webster defines privacy as "the quality or state of being apart from company or observation, freedom from unauthorized intrusion." Some people believe privacy equals secrecy, which is a person's desire to keep information related (and sometimes unrelated) to them unavailable to others. No matter how we define privacy, we all want the right to control the use of information related to us.

This control includes determining when and how information is shared and when the benefits of sharing outweigh privacy interests. For example, none of us would wear a smart watch or other wearable devices if we were told that we might have to pay a higher insurance fee because of our personal data being shared with our insurance company.

Control over data should apply to students' information as well. While the Family Educational Rights and Privacy Act (FERPA) was enacted to protect the privacy of students' education records, students often share and higher education institutions collect more information than necessary; therefore, institutions should consider whether all the data it collects should be treated as education records.
Often, however, students do not realize how much data their institutions collect, and they seldom ask questions about how the data is processed or used.
Usually, students are concerned about their education and health records and believe the institution safeguards that information. Often, however, students do not realize how much data their institutions collect, and they seldom ask questions about how the data is processed or used. For example, most institutions encourage students to use a single identification card that can be used anywhere on campus. In some instances, students can add funds to the card to use as a form of payment both on and off campus.

While students like the convenience of using only one card to access anything, they might not realize the amount of information they provide to the institution each time they use the card. Every time a student swipes their card to enter a facility or room, pay for a snack, use the bus, check out a book or movie, or take a course or test online, the student unknowingly shares personal information, including their personal habits and purchases, with the institution.

In fact, students share this information not only with the institution but also with third-party providers involved in the educational process, such as the learning management systems (LMS) the institution uses. For example, instructors may ask students to introduce themselves or share something about themselves on the LMS, as an ice breaker. Student pictures are also often part of the LMS, which means the third-party provider has access to the students' images and their ice-breaker information.
Working with the data every day, we can easily forget what is at stake.
As the recipients of significant amounts of non-education-related information, we have a responsibility to protect this data. Anyone who receives any information from students must have the proper training to ensure the information is protected and secured. Working with the data every day, we can easily forget what is at stake.

Additionally, we should notify students of any information we collect about them, and we should allow them to correct or request the removal of unnecessary information from the institutional database. While data regarding attendance or class participation is essential for educational purposes, data related to how students get to campus, what they consider a good ice breaker, or what restaurant or coffee shop they prefer is not. An institution might want to collect such data to enhance students' experience on campus. But that goal could be achieved by using aggregated data, which means that non-education data should be combined for all students, rather than keeping and processing non-education data about each student separately.

Furthermore, the use of tools and software such as online proctoring, in which software collects large amounts of student information (e.g., video and audio recordings through students' webcams and microphones), and exam environments should be analyzed extensively prior to implementing or requiring their use. Before contracting with a company that offers an invasive proctoring practice, an institution must ensure the protection of students' privacy and that any secondary use of students' information is limited.
There is no one-size-fits-all regulation to protect students' privacy.
There is no one-size-fits-all regulation to protect students' privacy. While FERPA is still the prominent regulation that institutions rely on, it was last updated in 2011. Therefore, it has not kept up with technology use and third-party companies that provide technology services to institutions. Especially during the past year-and-a-half, when institutions had to enact distance education swiftly, many students were forced to accept third-party providers' terms, to finish their education. If a student disagreed with these terms, there was no room to push back when using the applications was required.

While distance education was an excellent solution for the problem at the time and may continue, institutions should recognize their heightened responsibilities resulting from that adjustment. Higher education institutions should consider a broad approach to the term "education records."

FERPA defines " education records " as follows:

(a) The term means those records that are:

(1) Directly related to a student; and

(2) Maintained by an educational agency or institution or by a party acting for the agency or institution.

This definition should also apply to any information collected by third-party providers during the course of a program. Institutions are responsible for ensuring that third-party providers meet Fair Information Privacy Principles, including

Transparency regarding how the data is used;

Limiting use of the data to its intended purpose;

Giving students the opportunity to correct errors;

Enabling students to opt out of any data mining unrelated to educational purposes;

Keeping collected information secure.

These are only a few requirements that both institutions and third-party providers should consider.

In 2014, the Director of the Electronic Privacy Information Center's Student Privacy Project proposed a Student Privacy Bill of Rights, which proposed several rights allowing students to have control over their data. Now, seven years later, there are still no meaningful regulations that give students control of their data. However, institutions continue to collect student data more aggressively to create more targeted advertisements.

While students' privacy mattered before, the significance of protecting it become more prevalent during the past year-and-a-half since the students had to share more information with institutions than usual. Therefore, now more than ever, institutions should consider reviewing their data collection policies and permitting the students to control the extent to which an institution uses their data.

# data[].attributes.attachment_link.title
The Importance of Students' Privacy - Student Privacy Compass

# data[].attributes.attachment_link.description
In November 2021, the first higher education cohort of the Future of Privacy Forum Train-the-Trainer Program concluded. The Train-the-Trainer program for higher education seeks to multiply people on the ground who can provide basic student privacy support. The author prepared this guest blog as part of her final course project.

# data[].attributes.headline
What are the various laws regarding student data privacy that teachers and school administrators must be mindful of?

# data[].attributes.subject
What are the various laws regarding student data privacy that teachers and school administrators must be mindful of?

# data[].attributes.body
How the university collects and uses our data and information.

# data[].attributes.attachment_link.readable_text
Policy Statement

SUNY Oneonta and third parties that SUNY Oneonta authorizes to act on its behalf collect information from users who access suny.oneonta.edu (hereafter, the "SUNY Oneonta website"). The university analyzes such information to better understand how users interact with SUNY Oneonta content, to determine what information is of most and least interest to users, and to improve the utility of the material available on the SUNY Oneonta website. The university does not sell or share such information or use it for commercial marketing. Users may limit the collection of such information.

Rationale

The collection of information through the SUNY Oneonta website and the disclosure of that information are subject to the Internet Security and Privacy Act. As such, SUNY Oneonta has adopted a policy to describe what information may be collected through the SUNY Oneonta website, the methods of and conditions of its collection, how the university may use such information, and the university's privacy practices pertaining to such information.

Applicability of the Policy

This policy applies to users of the SUNY Oneonta website.

Policy Elaboration

User information collected automatically

When a user accesses the SUNY Oneonta website, the university automatically collects and stores information such as the following:

1. the Internet protocol address and domain name used;

2. the type and version of browser and operating system used;

3. the date and time that the SUNY Oneonta website was accessed;

4. the web pages or services that accessed at the SUNY Oneonta website;

5. the website the user accessed prior to accessing the SUNY Oneonta website;

6. the website the user accesses after accessing the SUNY Oneonta website;

7. any file that the user downloads; and

8. demographics and interests data, such as the user's age, gender, affinity categories (i.e. sports fans), and in-market segments (product-purchase interests).

None of the foregoing information is deemed to constitute personal information relating to the user.

Thresholds are applied to demographics and interests data to prevent anyone viewing a report from inferring the demographics or interests of individual users. In addition, the university will not identify users or facilitate the merging of personally identifiable information with non-personally identifiable information collected through any Google advertising product or feature unless the university has robust notice of, and the user's prior affirmative (i.e., opt-in) consent to that identification or merger, and is using a Google Analytics feature that expressly supports such identification or merger. Irrespective of users' consent, the university will not attempt to disaggregate data that Google reports in aggregate.

Having accurate information about users allows the university to provide them with smooth, efficient, and customized experiences. Specifically, the university may use information collected from SUNY Oneonta website users to:

compile anonymous statistical data and analysis for use internally or with third parties;

deliver targeted advertising to users;

implement email marketing campaigns;

increase the efficiency and operation of this website; and/or

monitor and analyze usage and trends to improve users' experiences with this website.

Tracking Technologies

SUNY Oneonta and authorized third-party vendors may use tracking technologies such as cookies, identifiers and web beacons to automatically collect user information. Tools may include:

Google Analytics, Google AdWords, and Google Tag Manager

Google, an authorized third-party vendor, may use a combination of first-party cookies and identifiers (such as the Google Analytics cookies) and third-party cookies and identifiers (such as Google advertising cookies).

The following Google Analytics Advertising Features may be implemented at any point under this privacy policy:

remarketing with Google Analytics

Google Display Network Impression Reporting

Google Analytics Demographics and Interest Reporting

integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers

SUNY Oneonta may use remarketing and/or similar audience technologies to reach people who previously visited this site, or people similar to previous visitors, in an effort to match the right people with the right message. Google may show our ads on sites across the Internet and may use cookies to serve ads based on a user's past visit(s) to the SUNY Oneonta website.

SUNY Oneonta will not identify users or facilitate the merging of personally identifiable information with non-personally identifiable information collected through any advertising product or feature unless the university has robust notice of and the user's prior affirmative (i.e., opt-in) consent to that identification or merger. In addition, the university does not attempt to disaggregate data that Google reports in aggregate.

Google describes how it uses data when users use its partners' sites or apps.

Visitors can opt out of the Google Analytics Advertising Features through Google Analytics' opt-outs for the web, Ads Settings, Ad Settings for mobile apps, or any other available means (for example, the NAI's consumer opt-out).

Facebook Tools

Facebook, an authorized third-party vendor, may use cookies, web beacons, and other storage technologies to collect or receive information from websites you visit and elsewhere on the Internet, and use that information to provide measurement services and to target ads.

Users may opt-out of the collection and use of information for ad targeting, at YourAdChoices and/or Your Online Choices.

Siteimprove

Siteimprove, an authorized third-party, uses web crawlers to scan the SUNY Oneonta website. Siteimprove stores information in its databases and presents it in reports that the university generates through the Siteimprove SaaS platform.

When a user visits the SUNY Oneonta website, the Siteimprove Javascript automatically sends user data to Siteimprove. Siteimprove receives the data and extracts user information including the user's IP address. Siteimprove also tracks the user's location, operating system, organization, browser type, etc.

Siteimprove provides a list of cookies it uses on its clients' website at https://siteimprove.com/legal/privacy-policy/.

User information collected through voluntary submission

SUNY Oneonta collects information, including personal information, that users voluntarily submit to the SUNY Oneonta website while conducting online transactions such as taking a survey, creating a registration or filling out an order form. The university uses such information to operate its programs, which include the provision of goods, services, and information. SUNY Oneonta may disclose such information only for those purposes that may be reasonably ascertained from the nature and terms of the transaction in connection with which the information was submitted.

If a user sends an email to SUNY Oneonta while accessing the SUNY Oneonta website, SUNY Oneonta will collect the user's email address and the contents of the user's message. The information SUNY Oneonta collects in this circumstance may include text characters, audio, video, and graphic information formats included in the message. SUNY Oneonta may use such information to respond to users, to address issues users identify, to improve the SUNY Oneonta website, or to forward users messages to others for appropriate action. SUNY Oneonta does not collect, sell or otherwise disclose email addresses for commercial purposes.

SUNY Oneonta does not knowingly collect personal information from children or create profiles of children through the SUNY Oneonta website. However, personal information submitted in an email or through an online transaction will be treated as though it was submitted by an adult, and may, unless exempted from access by federal or state law, be subject to public access.

Collection and disclosure of personal information

The State of New York regulates disclosure by SUNY Oneonta of information, including personal information, collected through the SUNY Oneonta website. Such disclosure is subject to the Freedom of Information Law and the Personal Privacy Protection Law.

With few exceptions, SUNY Oneonta will only collect personal information through the SUNY Oneonta website if the user has consented to such collection. With few exceptions, SUNY Oneonta will only disclose personal information it collects through the SUNY Oneonta website if the user has consented to such disclosure. A user's participation in an online transaction whereby the user discloses personal information through the SUNY Oneonta website, whether solicited or unsolicited, constitutes that user's consent to SUNY Oneonta's collection and disclosure of such information for the purposes reasonably ascertainable from the nature and terms of the transaction.

However, SUNY Oneonta may collect or disclose personal information through the SUNY Oneonta website without user consent if the collection or disclosure is:

1. necessary to perform the statutory duties of SUNY Oneonta, or necessary for SUNY Oneonta to operate a program authorized by law, or authorized by state or federal statute or regulation;

2. made pursuant to a court order or by law;

3. for the purpose of validating the identity of the user; or

4. of information to be used solely for statistical purposes that is in a form that cannot be used to identify any particular person; or

5. to federal or state law enforcement authorities for the purpose of enforcing SUNY Oneonta's rights against unauthorized access or attempted unauthorized access to SUNY Oneonta's information technology assets or against other inappropriate use of the SUNY Oneonta website.

Retention of information

The State of New York regulates the retention by SUNY Oneonta of information collected through the SUNY Oneonta website. Such information is subject to the records retention and disposition requirements of the New York State Arts & Cultural Affairs Law.

In general, the Internet services logs of the SUNY Oneonta website, comprising electronic files or automated logs created to monitor access and use of SUNY Oneonta services provided through the SUNY Oneonta website are destroyed in a manner consistent with the General Retention and Disposition Schedule for New York State Government Records Item 90239. Information, including personal information, that users submit in emails or when users engage in a transaction such as completing a survey, registration form, or order form is retained in accordance with the records retention and disposition schedule established for the records of the program unit to which information is submitted. Information concerning such records' retention and disposition schedules may be obtained through the SUNY Oneonta records management officer at:

SUNY Oneonta
108 Ravine Pkwy.
Netzer 200
Oneonta, NY 13820.

Confidentiality and integrity of collected information

SUNY Oneonta recognizes the need to protect personal information collected through the SUNY Oneonta website against unauthorized access, use, or disclosure. SUNY Oneonta limits employee access to personal information collected through the SUNY Oneonta website to those employees who need access to the information to perform their official duties. Employees with access to personal information are made aware of the need to follow appropriate procedures in connection with any disclosure of such information.

SUNY Oneonta has implemented procedures to safeguard the integrity of its information technology assets, including, but not limited to, authenticating, monitoring, auditing, and encrypting. Security procedures have been integrated into the design, implementation, and day-to-day operations of the SUNY Oneonta website consistent with the university's commitment to the security of electronic content as well as the electronic transmission of information.

For security purposes and to maintain the availability of the SUNY Oneonta website for all users, SUNY Oneonta uses software to monitor traffic to identify unauthorized attempts to upload or change information or otherwise damage this website.

Access to and correction of collected personal information

Any user may submit a request to the SUNY Oneonta privacy compliance officer to determine whether personal information pertaining to that user has been collected through the SUNY Oneonta website. Such request must be made in writing and accompanied by reasonable proof of identity of the user, which shall include but not be limited to verification of a signature or inclusion of an identifier generally known only to the user. The address of the privacy compliance officer is:

SUNY Oneonta
108 Ravine Pkwy.
Netzer 208
Oneonta, NY 13820.

The privacy compliance officer shall, within five business days of the date of the receipt of a proper request, make a such collected information available to the person requesting it, deny such request in writing or furnish a written acknowledgment of the receipt of such request and a statement of the approximate date, which shall be reasonable under the circumstances of the request, when such request will be granted or denied.

In the event that SUNY Oneonta determines that it has collected personal information pertaining to a user through the SUNY Oneonta website and that information is to be provided to the user pursuant to the user's request, the privacy compliance officer shall inform the user of their right to request that the personal information be amended or corrected under the procedures set forth in Section 95 of the Public Officers Law, Article 6-A.

Disclaimer

The information in this policy should not be construed as giving business, legal, or other advice, or warranting as fail proof the security of information provided through the SUNY Oneonta website.

Definitions

"Cookie" means a unique text file stored on a user's computer by an Internet browser. These text files are used as a means of distinguishing among users of a website and as a means of customizing the website according to the user's preferences and interests. A cookie will not include personal information unless the user has volunteered that information.

"Personal information" means any information concerning a natural person, as opposed to a corporate entity, which, because of name, number, symbol, mark, or other identifiers, can be used to identify that natural person.

"Remarketing" means the presentation of a targeted ad to a user who previously visited a particular website.
"Web beacon" means a graphic with a unique identifier, similar to a cookie, used to track the online movements of users.

Related Policies
General Retention and Disposition Schedule for New York State Government Records Information Technology Acceptable Use Policy
New York State Arts & Cultural Affairs Law, Section 57.05 (Archives and Records Management Law for the Records of New York State Government)

New York State Information Technology Guideline No. NYS-G02-001 (Internet Privacy Policies)

New York State Public Officers Law, Article 6 (Freedom of Information Law)

New York State Public Officers Law, Article 6-A (Personal Privacy Protection Law)

New York State Technology Law, Article II (Internet Security and Privacy Act)

# data[].attributes.attachment_link.description
SUNY Oneonta and third parties that SUNY Oneonta authorizes to act on its behalf collect information from users who access suny.oneonta.edu (hereafter, the “SUNY Oneonta website”). The university analyzes such information to better understand how users interact with SUNY Oneonta content, to determin…

# data[].attributes.headline
What is the Children's Internet Protection Act?

# data[].attributes.subject
What is the Children's Internet Protection Act?

# data[].attributes.body
CIPA is a law that places restrictions on websites and apps on students technological devices. This law was put into place to protect children from the bad things on the internet. While there are many websites and apps that schools place restrictions on, students are allowed to use other appropriate websites (and typically are interactive, allowing the teacher to view students work).

# data[].attributes.headline
What is the Family Educational Rights and Privacy Act?

# data[].attributes.subject
What is the Family Educational Rights and Privacy Act?

# data[].attributes.headline
COPPA - Children's Online Privacy Protection Rule

# data[].attributes.subject
COPPA - Children's Online Privacy Protection Rule

# data[].attributes.body
It enforces certain requirements on websites, games, etc for children under 13 years old. It puts additional protections in place for these children that the websites must adhere to. One way they do this is by implementing parental controls or parental consent is needed for them to start the game.

# data[].attributes.headline
Children's Internet Protection Act. Why must schools comply with it? 

# data[].attributes.subject
Children's Internet Protection Act. Why must schools comply with it? 

# data[].attributes.body
CIPA was made to protect children from harmful websites. Schools must follow the rules and policies enacted by CIPA to carry out these protective actions. There are several positive precautions that reinforce safety aspects in the school. For example, schools must enact internet safety policies, monitor online activity and restrict access to harmful or obscene internet activity. Another safety aspect is enacted through the Protecting Children 21st Century Act. this Act states that schools are to educate minors about appropriate online behavior.