CT Ed Tech: Programs & Services

Student Data Privacy Resources

In an effort to support public school districts and providers of educational technology in complying with the State's student data privacy law, the Connecticut Commission for Educational Technology recently hosted an informational Webinar (click here to view archive) and provides the following resources:

>> Resources for Connecticut Public Schools
>> Resources for Educational Technology Providers

Resources for Connecticut Public Schools (“Boards”)

Educators and school leaders should review and understand their obligations under Connecticut’s student data privacy law (Connecticut General Statutes §§ 10-234aa through 10-234dd) by visiting http://bit.ly/CT-SDP_Stat. As a key element of compliance, districts must enter into contracts with providers of educational technology whenever such providers capture or have access to personal student information, records, or data. The resources and tools below support — but do not take the place of — such contracts.

  • Model Terms of Service (TOS) Addendum: Districts may encourage Contractors to modify their TOS or create a contract addendum using the language contained in the Model TOS Agreement Addendum (click here to view). Contractors must address all of the contractual requirements defined in the Model TOS Addendum. The only variable components of that document are highlighted in red text. These sections serve as placeholders for contractors and districts to define protocols specific to each executed contract.
  • Connecticut Educational Software Hub: Educators and district leaders may use this Web site to search for educational software developed by companies that have pledged compliance with Connecticut’s privacy law. Contractors do so by digitally signing the Connecticut Student Data Privacy Pledge and providing documentation to support their compliance (e.g., sample contract or addendum documents).

    NOTE: Signing the Pledge and registering on the Hub do not by themselves constitute compliance. Contractors and boards must execute agreements that address the state’s privacy statute in order to achieve compliance with the law.

    Districts interested in leveraging a host of other features offered through the Hub (LearnPlatform) can watch this recorded presentation:

    >> LearnPlatform Overview

    LearnPlatform provides district leaders with insights into educational technology usage rates and trends, conduct pilot evaluations of software, track and report on efficacy, and provide teachers with the ability to share feedback on specific products.

  • Hub Endorsements and Communication Resources: Districts should refer educational software companies to the Hub as a state resource for supporting privacy compliance. Doing so saves time for contractors and districts and will help build a single point of reference for compliant software. Educators and leaders may use these resources to encourage use of the Hub:
    • Sample E-Mail: Use this language as a template to encourage contractors to visit the Hub, learn about Connecticut’s statutory requirements, and take steps to comply with our laws.
    • Letter of Endorsement: The Connecticut General Assembly, Connecticut Association of Boards of Education, Connecticut Association of Public School Superintendents, and Connecticut Association of Schools have all endorsed the use of the Hub to support compliance. Use this letter of endorsement to encourage contractors to visit and use the Hub.
  • Data Privacy Toolkit: This document provides additional supports to contractors and districts. The Toolkit includes background and definitions to help interpret the law, best practice guidance in security, and communication templates.

Resources for Educational Technology Providers ("Contractors")

The Connecticut Commission for Educational Technology provides the following information and resources to help providers of educational software and services (defined as “Contractors”) understand and comply with all applicable aspects of our state’s law governing student data privacy. That statute imposes obligations on contractors that, in the course of providing services to teachers, schools, or other representatives of public boards of education (“Board”), gain possession of or access to student information, student records, or student-generated content (collectively, “student data”).

Contractors should review and consider using the following resources:
  • Governing Statute: See Connecticut General Statutes §§ 10-234aa through 10-234dd, available from the Connecticut General Assembly Web site at http://bit.ly/CT-SDP_Stat.
  • Model Terms of Service (TOS) Addendum: Contractors looking to comply with Connecticut’s law by modifying their current TOS or creating a contract addendum may use the language contained in the Model TOS Agreement Addendum at bit.ly/CT_Model_TOS. Contractors must address all of the contractual requirements defined in the Model TOS Addendum. The only variable components of that document are highlighted in red text. These sections serve as placeholders for contractors and their Board customers to define protocols specific to each executed contract. Any contract entered into between a contractor and Board on or after July 1, 2018, that does not contain the provisions detailed in state statute and reflected in the Model TOS is considered void.
  • Connecticut Educational Software Hub: This Web site, specifically referenced in the state privacy law, allows contractors to register their products as compliant by digitally signing the Connecticut Student Data Privacy Pledge. The registration process encourages contractors to provide supporting documentation that demonstrates compliance (e.g., sample contract or addendum documents). Taking these steps provides visibility to Connecticut districts, which use the Hub to find compliant software. For more information about the Hub, video instructions on how to register, and other resources, visit the Hub's Contractor FAQ page at http://connecticut.learnplatform.com/faqs/.

    NOTE: Signing the Pledge and registering on the Hub do not by themselves constitute compliance. Contractors and boards must execute agreements that address the state’s privacy statute in order to achieve compliance with the law.




Content Last Modified on 9/12/2018 11:06:41 AM