Student Data Privacy in BVSD
- General information
- User and Sharing of data in BVSD
- National Trusted Learning Environment (TLE) Seal
- Current Vendor DPA List
- On Demand Service Providers
- Student Information Privacy & Protection Policy
Boulder Valley School District (BVSD) values accountability and transparency at all levels including ensuring that student data privacy and security are a top priority. BVSD has taken action to ensure that all student data is handled securely and in compliance with the Colorado Student Transparency and Security Act. Through rigorous processes and high standards of compliance, our goal is to not only abide to state and federal law, but to provide students, parents, and our community with the resources and information needed to protect student privacy.
The district uses data to support a variety of processes throughout the district including supporting student learning, evaluating teachers, improving instructional and operational practices, and complying with various state and federal requirements.
In addition to this data, some student Personal Identification Information (PII) is sent to the Colorado Department of Education (CDE). This is available through CDE's Ed Data Portal.
CoSN (the Consortium for School Networking) has awarded Colorado’s Boulder Valley School District the national Trusted Learning Environment (TLE) Seal. Boulder Valley earned the Seal for taking measureable steps to strengthen the privacy of their students’ data.
Specifically, they have demonstrated effective student data privacy practices in the following areas:
- Leadership, by managing and collaborating with stakeholders regarding the use and governance of student data to inform instruction.
- Business, by establishing acquisition vetting processes and contracts that, at minimum, address applicable compliance with laws while supporting innovation.
- Data security, by performing regular audits of data privacy and security practices and publicly detailing these measures.
- Professional development, by requiring school staff to conduct privacy and security training and offering related resources to all stakeholders in the community.
- Classroom, by implementing educational procedures and processes to ensure transparency while advancing curricular goals.
Learn more about the TLE Seal Program at: trustedlearning.org
Read more about BVSD's approach to data privacy here.
DATA PROTECTION ADDENDUMS
Since December 2014 the District has required vendors to sign a Data Protection Addendum (DPA) to prohibit student data mining or targeting marketing while requiring industry standards for encryption and security. As new district-wide contracts are signed and old contracts are renewed, the Data Protection Addendum is put into place. The goal is to ensure that all vendors are either subject to a negotiated contract with the Data Protection Addendum or covered by new state or federal legislation regulating vendor practices.
If you are purchasing or seeking new software, please see information regarding the software approval process. If you are renewing a contract with a vendor, please contact purchasing if there is not a DPA signed by this vendor.
APPROVED DPA VENDOR LIST
The Approved DPA Vendor List provides the names of vendors who have signed BVSD's Data Protection Addendum (DPA). We require that vendors sign the DPA if they have a negotiated contract.
In the interest of maintaining innovative practices in the classroom, the Approved DPA Vendor List excludes teacher-initiated classroom tools ("click-through" contracts). However, it is the teacher's responsibility to read and understand all click-through terms before accepting. For more information, please see the On Demand Service Provider page.
In addition to a DPA, several school service providers have opted to join the Student Privacy Pledge. These providers have guaranteed to take responsible steps towards supporting the effective use of student data while also honoring student privacy and information security.CDE AGREEMENTS & CONTRACTS
In addition to contracts that the district initiates, there are contracts that impact BVSD due to agreements and contracts negotiated by the Colorado Department of Education. For a list of current and expired contracts that involve Personally Identifiable Information (PII) you can visit their website.
CDE also collects student data from students across Colorado. A list of what type of data is collected as well as how the information is used is available.
CLICK THROUGH CONTRACTS
Many On-Demand Service Providers have click-through contracts which are the agreements you see before installing an app or extension in your Chrome browser, or before installing an online program. BVSD does not currently require a signed Data Protection Addendum (DPA) for these teacher-initiated (or "click-through") contracts.
Once you have chosen an appropriate tool to use in your classroom, please follow the process below to ensure that you are compliant with the Colorado Student Transparency and Security Act. (To access the BVSD On-Demand Service Provider list, you can also click here.)
If the District ceases using or refuses to use an on-demand school service provider pursuant to C.R.S. § 22-16-107, the name of the on-demand school service provider will be posted below along with any written response that the on-demand school service provider submits. The District will also notify the Colorado Department of Education, which will post on its website the on-demand provider's name and any written response.
Boulder Valley School District has adopted a Student Information Privacy and Protection Policy to inform stakeholders of important privacy aspects including procedures, data retention, destruction requirements, FERPA compliance, parental rights and hearing and complain procedures. A copy of this policy was adopted by the BVSD Board of Education on December 5, 2017 and can be found below.
FEDERAL PRIVACY LAWS
SDTSA- Colorado Student Data Transparency & Security Act (HB 16-1423)
CIPA - Children's Internet Protection Act
COPPA - Children's Online Privacy Protection Act
FERPA - Family Educational Rights and Privacy Act
HIPAA - Health Insurance Portability and Accountability Act
FROM THE COLORADO DEPARTMENT OF EDUCATION