https://www.europesays.com/1836986/ Can Elon Musk And DOGE Access Student Loan Data? What To Know #DepartmentOfEducation #DepartmentOfGovernmentEfficiency #doge #DonaldTrump #ElonMusk #FederalStudentLoans #ferpa #FerpaPenalties #Musk #StudentLoanDataAccess #StudentLoansForgivenFerpa #UniversityOfCaliforniaLawsuit

So there's a massive #databreach affecting school districts across the country and millions of students .... and #FERPA doesn't require data breach notification to students.

But's that okay anyway because Trump wants to totally shutter the federal Education Department?

I would normally insert the "Everything is Fine" meme here but in light of California's fires, it doesn't feel appropriate right now.

Some folks may get confused by PowerSchool saying that if they have medical records on students, they may have to notify under HIPAA.

Most student medical/health records are not covered under HIPAA. They are covered under FERPA.

If the district is billing the student's health insurance for services like speech therapy, physical therapy, or occupational therapy, then there's a HIPAA issue. Or if the school has arrangements with an actual clinic that is providing medical/health services to students. But most things like doctor's absence notes or even allergy action plans or school medication orders are not under HIPAA.

If the district has a health plan for employees that it administers, there's also a HIPAA issue there.

#PowerSchool #databreach #incidentresponse #HIPAA #FERPA

@douglevin @funnymonkey

N.J. school accidentally released names of kids who opted out of sex education:

https://www.nj.com/education/2024/11/nj-school-district-mistakenly-released-names-of-kids-who-opted-out-of-sex-education.html

It seems they had redacted the names in .pdf version, but web .HTML version was exposing the names. Ok, chalk it up to error? But then someone claims that a school official knew about this problem a year ago and did nothing about it?

And of course, what's the remedy under #FERPA? Oh, that's right -- there is none.

@douglevin @funnymonkey @brett @mkeierleber

For your "No need to hack if it's leaking" files:

"Confidential student information was unintentionally leaked in Naperville Central’s School Improvement Plan, which was released publicly on Friday, Sept. 20. It was removed on Tuesday, Sept. 24 around 3:35 p.m. when Central Times staff brought the breach to the attention of Principal Jackie Thornton."

Read more at https://www.centraltimes.org/showcase/2024/09/26/confidential-student-information-released-in-district-203-data-leak/

#EduSec #exposure #leak #databreach #FERPA

@douglevin @funnymonkey @brett

BlackSuit ransomware update: 42GB of data claimed to be from Edgewood Schools posted, nothing new on Monroe County government attack

https://bsquarebulletin.com/2024/07/13/blacksuit-ransomware-update-42gb-of-data-claimed-to-be-from-edgewood-schools-posted-nothing-new-on-monroe-county-government-attack/

@bloomington_in

OK, I did not know about this last year when the Verity Vote report came out. Did you?

Concerns raised over universities signing over students’ private #FERPA data to voter data companies: https://www.thecollegefix.com/concerns-raised-over-universities-signing-over-students-private-ferpa-data-to-voter-data-companies/

Related report: "The Best Data that Money Can’t Buy
Student Data for Partisan Political Advantages" https://verityvote.us/wordpress/wp-content/uploads/2023/07/national-student-data-sharing_VerityVote.pdf

@douglevin @funnymonkey

How did I sleep through this???

Any partisan biases aside, is there a real #privacy #dataprotection issue here?

@douglevin @brett @funnymonkey Well, as we all know too well, #FERPA doesn't even require notification,so let's look to state law. According to the Kansas AG:

"Kansas law requires any person who conducts business in this state that owns or licenses computerized data including personal information to conduct good faith investigations into the
likelihood that personal information has been or will be
misused when it becomes aware of any breach of the security of the system. (K.S.A. 50-7a02.) If the investigation reveals that Personal Information has been misused, or is likely to be misused, the person must give notice to the affected Kansas resident without unreasonable delay and as soon as possible."

Not much help there. But I don't think almost a year is reasonable.

In its wisdom, #SUNY central has apparently decided that allowing an instructor to manage multiple sections of the same course from one LMS shell is a violation of #FERPA

So here I am coding and entering grades and fighting with #brightspace to perfectly synchronize my two intro #statistics courses.

I would like to have a conversation with whatever SUNY lawyers made this ridiculous decision, with a FERPA representative on conference call.

Paging regulators to Aisle 4 to look at Pacific Union College's data security and breach disclosure:

https://www.databreaches.net/paging-regulators-to-aisle-4-to-look-at-pacific-union-colleges-data-security-and-breach-disclosure/

#databreach #EduSec #FERPA #FTC #Deception #IncidentResponse #Transparency #Notification #GLBA #InfoSec #ransomware

@douglevin @brett

One of the problems with asking companies "Can that data be connected back to the students themselves?" is that the algorithms that can correlate large, seemingly unrelated data are now so complex that the companies can always say "no" and still mean "yes." Beware "data analytics partners"! #AI #privacy #FERPA

https://www.edsurge.com/news/2023-11-08-how-to-navigate-the-nuances-of-anonymous-and-de-identified-data-in-ai-driven-classrooms

Panel on Hot Topics in #FERPA is coming up! https://online.suny.edu/summit/ferpa/ #SUNYOnlineSummit #OnlineLearning #OnlineEducation #OnlineTeaching

Day 3 of the #SUNYOnlineSummit is underway!! @DRbouchey is live now on using data to support #onlinelearning success, Definitions in #OnlineEducation is coming up, followed up by Hot Topics in #FERPA https://online.suny.edu/summit/category/day-3/

Feds investigating Pasco schools giving student data to sheriff —The Tampa Bay Times reported in November that the school district shared information on student grades, discipline and attendance with the Sheriff’s Office, which used the data to compile a secret list of schoolchildren it believed could “fall into a life of crime.”

The federal education department is now looking into the arrangement, a spokesman said Friday. #dataprivacy #privacy #FERPA

https://www.tampabay.com/investigations/2021/04/19/feds-investigating-pasco-schools-giving-student-data-to-sheriff/