Student Data and Privacy

Student Online Personal Protection Act (SOPPA):
Effective July 1, 2021, school districts are required by the Student Online Personal Protection Act (SOPPA) to provide additional guarantees that student data is protected when collected by educational technology companies and that data is used for beneficial purposes only (105 ILCS 85). In compliance, DuPage High School District 88 only collects information that directly relates to school activities and safeguards the privacy of students and confidentiality of student data.

SOPPA requires that school districts must:

• Enter into written agreements with all K-12 service providers who collect student data. Covered data includes, but is not limited to: information in the student's education record, first/last name, address, phone number, e-mail address, grades, test results, socioeconomic information, photos, search activity, voice recordings, geolocation information and more.
  
  
• Implement and maintain reasonable security practices. Student data is protected through comprehensive privacy policies and security measures such as firewalls, secure servers, intrusion detection software and other methods. Written agreements with vendors require that the vendor also maintains security procedures.
  
  
• Post a list of operators. This list will include what data elements are shared, written agreements/contracts with the operator within 10 days of signing and subcontractors for each operator.

DuPage High School District 88 Technology Policies and Guidelines:

• 6:235 Access to Electronic Networks
  
  
• 7:345 Use of Educational Technologies; Student Data Privacy and Security

DuPage High School District 88 adheres to the following applicable laws regarding student data and privacy:

• Children's Internet Protection Act (CIPA)
• Children's Online Privacy Protection Act (COPPA)
• Family Educational Rights and Privacy Act (FERPA)
• Illinois School Student Records Act (ISSRA)
• Student Online Personal Protection Act (SOPPA)

DuPage High School District 88 Data Privacy Officer:
Federal and State law govern the protection of student data, including school student records and/or covered information. The sale, rental, lease, or trading of any school student records or covered information by the district is prohibited. Protecting such information is important for legal compliance, district operations and maintaining the trust of district stakeholders, including parents, students and staff. The District 88 Board of Education designates the Superintendent or designee to serve as Privacy Officer, who shall ensure the district complies with the duties and responsibilities required of it under the Student Online Personal Protection Act, 105 ILCS 85/, amended by P.A. 101-516, eff. 7-1-21.

District-approved Web-based Tools/Applications and Written Agreements:
DuPage High School District 88 values your child's privacy and strives to ensure parents are aware of what web-based tools and applications are being used for educational purposes. A list of approved web-based tools/applications, written agreements with operators and a list of data elements shared can be viewed at https://sdpc.a4l.org/district_search.php?state=IL&districtID=6066.

Parent Rights:
Parents have the right to inspect, review and correct information maintained by the school, operator and the Illinois State Board of Education. All requests should be directed to the Director of Technology, Teaching and Learning at 630-782-3133.

Data Breaches:
In the event there is a data breach, DuPage High School District 88 will notify parents via district communication systems, if the breach involves 10-percent or more of the district's students. The district also will provide the number of students whose covered information was involved in the breach, the date of the breach (or estimate) and the operator/vendor name.