IDAE: Student Privacy Policy

The superintendent, the board and staff shall protect the right of privacy of students and their families in connection with any surveys or physical examinations conducted, assisted or authorized by the board or administration. The district shall annually provide parents notice of their rights under the Protection of Pupil Rights Amendment and the Student Data Privacy Act, at the beginning of each school year, and at any other time the school district policies in the area are substantially changed.

Student Data Restrictions

Any student data submitted to and maintained by a statewide longitudinal student data system shall only be disclosed in accordance with the Student Data Privacy Act. Disclosure of all other student data or student record information maintained is governed by the Family Educational Rights and Privacy Act ("FERPA").

Annual written notice presented to parents and legal guardians of district students shall: 1.) require parent or guardian's signature or digital acknowledgement; and 2.) shall state student data submitted to and maintained by a statewide longitudinal data system only be disclosed as follows.

Student data may be disclosed to:

• The authorized personnel of an educational agency or the state board of regents who require disclosures to perform assigned duties; and
• The student and the parent or legal guardian of the student, provided the data pertains solely to the student.

Student data may be disclosed to authorized personnel of any state agency, or to a service provider of a state agency, educational agency, or school performing instruction, assessment, or longitudinal reporting, provided a data-sharing agreement between the educational agency and other state agency or service provider provides the following:

• purpose, scope, and duration of the data-sharing agreement;
• recipient of student data use such information solely for the purposes specified in agreement;
• recipient shall comply with data access, use, and security restrictions specifically described in agreement; and
• student data shall be destroyed when no longer necessary for purposes of the data-sharing agreement or upon expiration of the agreement, whichever occurs first.

Unless an adult written consent or parent or guardian of a minor student provides written consent to disclose personally identifiable student data, student data may only be disclosed to a governmental entity not specified above or any public or private audit and evaluation or research organization if the data is aggregate data. "Aggregate data" means data collected or reported at the group, cohort, or institutional level and which contains no personally identifiable student data.

The district may disclose:

• student directory information when necessary and the student's parent or legal guardian has consented in writing or acknowledged digitally;
• directory information to an enhancement vendor providing photography services, class ring services, yearbook publishing services, memorabilia services, or similar services;
• any information requiring disclosure pursuant to state statutes;
• student data pursuant to any lawful subpoena or court order directing such disclosure; and
• student data to a public or private postsecondary educational institution for purposes of application or admission of a student to such postsecondary educational institution with the student's written consent.

Student Data Security Breach

If there is a security breach or unauthorized disclosure of student data or personally identifiable information of any student submitted to or maintained on a statewide student longitudinal data system, each affected student or the parent or legal guardian of the student, if a minor, shall be immediately notified, and an investigation into the causes and consequences of the breach or unauthorized disclosure will be conducted.

Biometric Data

The district shall not collect biometric data from a student or use any device or mechanism to access a student's physiological or emotional state, unless the adult student or the parent or legal guardian of the minor student consents in writing. "Biometric data" includes measurable biological or behavioral characteristics that can be used for automated recognition of an individual, such as fingerprints, retina and iris patterns, voiceprints, DNA sequence, facial characteristics, and handwritings.

Nothing in this policy shall prohibit the collection of audio voice recordings, facial expression information, and student handwriting for:

• provision of counseling or psychological services,
• conducting student threat assessments,
• completing student disciplinary investigations or hearings, or
• conducting child abuse investigations.

Select Student Surveys

No academic test, questionnaire, survey, or examination containing any questions about the personal and private attitudes, values, beliefs or practices of the student of the student's parents, guardians, family members, associates, friends, or peers that is administered during the school day shall be administered to any kindergarten through 12^th grade student unless:

• the parent or guardian is notified in writing not more than four months in advance of the administration of such test, questionnaire, survey, or examination that such is to be administered; and
• the parent or guardian of the student gives consent through a written or electronic signature or, in the event of an immediate need, gives verbal consent for the student to participate.

Advance notification to a parent or guardian must include:

• A copy of the test, questionnaire, survey, or examination that is to be administered;
• Information on how the parent or guardian may provide written consent to authorize the student to take such test, questionnaire, survey, or examination;
• The name of the company or entity that produces or provides the test, questionnaire, survey, or examination to the school; and
• Whether the school will receive or maintain the resulting data and an explanation of how the school intends to use and maintain such data.

For written consent to be accepted, timely notice in compliance with the requirements of this policy must be provided, and the parent or guardian must have had an opportunity to review the information contained in the notice. Written consent must be provided separately for each individual test, questionnaire, survey, or examination that is to be administered. Prior to administering any such test, questionnaire, survey, or examination, a copy of it must be posted and maintained on the district's website.

A student has the right to refuse to take any test, questionnaire, survey, or examination as described herein at any time, regardless of receipt of parent or guardian consent to participate. Prior to administering any such test, questionnaire, survey, or examination, each student shall be informed that such student has the right to refuse to take it and that the student will not suffer any adverse consequences based on refusal to participate.

No personally identifiable student data shall be collected through any such test, questionnaire, survey, or examination.

Except as otherwise provided in this policy, the provisions of this subsection shall apply to any test, questionnaire, survey, or examination as described herein that is administered or proposed to be administered to any student by any employee of a school district, including, but not limited to, any administrator, teacher, counselor, social worker, psychologist, or nurse.

If, however, any district employee becomes aware that a student may be at risk of suicide by a credible report from the student, the student's peers, or another school district employee, the school personnel who are designated to administer a suicide risk assessment or screening tool may administer such risk assessment or screening tool in accordance with the provisions of this subsection to determine whether the student could be at risk for suicide. Such designated school personnel may include, but is not limited to, any administrator, teacher, counselor, social worker, psychologist, or nurse. Prior to the administration of any such risk assessment or screening tool, the designated staff member shall verbally notify the parent or guardian before the administration of such risk assessment or screening tool and obtain the consent of the parent or guardian.

If the designated staff member is unable to verbally notify the parent or guardian of the student and obtain consent after reasonable attempts to do so, the designated staff member may administer the risk assessment or screening tool without such consent. If a risk assessment or screening tool is administered without the parent or guardian's consent, as soon as contact with the parent or guardian is made, the designated staff member shall notify the parent or guardian of the administration of such assessment or screening tool and provide to the parent or guardian all information obtained from the risk assessment or screening tool administered to the student.