Legal Resources, Policies, and Guidance
New York State Laws and Regulations
Federal Laws that Protect Student Data
– The foundational federal law on the privacy of students’ educational records, FERPAÌýsafeguards student privacy by limiting who may access student records, specifying for whatÌýpurpose they may access those records, and detailing what rules they have to follow whenÌýaccessing the data.
–ÌýPPRA defines the rules states and school districts must follow when administering tools likeÌýsurveys, analysis, and evaluations funded by the US Department of °µÍøTV to students.ÌýIt requires parental approval to administer many such tools and ensures that school districtsÌýhave policies in place regarding how the data collected through these tools can be used.
–ÌýCOPPA imposes certain requirements on operators of websites, games, mobile apps or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.
Legal Resources
Bill of Rights for Data Privacy and Security (Parents' Bill of Rights)
Annual ReportsÌýof the Chief Privacy Officer
Determinations of the Chief Privacy Officer – Privacy Complaint Determinations issued by the Chief Privacy Officer from December 1, 2021 to present.
Enforcement ActionsÌý–ÌýAgreements resulting from enforcement actions conducted pursuant to °µÍøTV LawÌý§ 2-d.
Ex Officio Members of the Board – May 28, 2025
CPO guidance regarding the use of streaming video services such as YouTube to broadcast a board of education meeting when a student member is present.Ìý
Biometric Determination – September 27, 2023
Determination regarding the use of biometric technology in schools.
°µÍøTVal Agency Website Monitoring Guidance – July 19, 2023
CPO guidance regarding the NYSED Privacy Office program to monitor some educational agencies for compliance with °µÍøTV Law § 2-d and FERPA.
Cyber Hygiene MemoÌý- May 1, 2023
Guidance for protecting districts from online threats.Ìý