Security & Privacy Resources

Data Privacy & Security Policy :In January 2020, the NYSED Board of Regents adopted Part 121 of the Commissioner's Regulations for the Strengthening of Data Privacy & Security in NYS Educational Agencies to Protect Personally Identifiable Information (PII) pursuant to Education Law sections 2-d, 101, 207, and 305.  District and BOCES policies are expected to be adopted no later than October 1, 2020.

Individual Data Privacy Agreements and privacy policy links for programs and/or websites can be found listed on our Approved Programs page. 

The Central Islip School District data security and privacy policies and Parent's Bill of Rights detail specific privacy protections that ensure:

1. Every use and disclosure of personally identifiable information (PII) by Central Islip School District shall benefit students and the district, such as improve academic achievement; advance efficient and effective school operations; empower families and students with information;

2. Personally identifiable information (PII) shall not be included in public reports or documents;

3. Parents, legal guardians, and eligible students are afforded all the protections, where applicable, under the Family Education Rights Privacy Act (FERPA) and the Individuals with Disabilities Act (IDEA) and the federal regulations for implementing those statutes;

4. Alignment with the National Institute for Standards & Technology (NIST) Cybersecurity Framework.

5. Annual training and notification for all employees.

6. Publication of the Central Islip data security and privacy policies on its website for its community of stakeholders.

Parents' Bill of Rights for Data Privacy and Security: The purpose of the Parents’ Bill of Rights is to provide information to parents, legal guardians, those in parental relation to students and eligible students (age 18 and older) about certain legal requirements that protect personally identifiable (PII) information pursuant to state and federal laws.   

Third Party Vendor/Service Provider Contracts: The Central Islip School District may utilize vendors through paid contracted services and/or free services activated through individual user Terms of Service agreements for one or more technology services in the provision of its educational services. These include software, mobile or web applications, and/or web-based services. 

Complete list of websites & programs that are approved for use by students & employees.  A program must submit a signed Data-Privacy Agreement with the Central Islip School District's Director of Technology prior to approval and/or purchase.  This includes and free or "freemium" programs educators want to use in their classroom.  No program regardless of "free", "freemium", "pilot", "grant" or district paid and licensed.  Websites & Programs without an official Data Privacy Agreement on file will be restricted and blocked from use. 

Inventory of Student Data Collected by the New York State Education Department (NYSED): As required by New York State Education law Section 2-d,  NYSED publishes a list of the data elements that it collects from NYS school districts and the purpose of the data collection. NYSED Inventory List of Student Data Collected

Complaint Procedures for Unauthorized Data Disclosure or Breech:  Parents, legal guardians, eligible students, principals, teachers, and employees of an educational agency may file a complaint about a possible data breach or improper disclosure of student data and/or protected teacher or principal data. 

1. To submit a complaint, please complete the Central Islip School District Unauthorized Data Disclosure or Breech Complaint Form. If you cannot complete the on-line form, please speak to your building Principal who can assist on your behalf. 

2. The Central Islip District's Director of Technology, Mr. Philip Voigt, will initiate an investigation.

3. Investigations will be completed and finalized in a reasonable amount of time, typically, within 60 calendar days from the receipt of the complaint. In the event the investigation needs to extend beyond 60 days, due to extenuating circumstances, the complainant will be contacted to inform them of the delay and the expected timeline for completion.

4. The Central Islip School District will maintain a record of all complaints of data breaches or unauthorized releases of student/staff data & their disposition in accordance with applicable data retention policies, and report complaint reports & investigations as directed by NYS Ed Law 2d / Part 121 Regulations to the NYSED Chief Privacy Officer. 

Additional Resources

• For information about Federal Laws that protect Student Data (FERPA, PPRA, COPPA):  Federal Laws that Protect Student Data 

• For information about NYS Education Department's Data Privacy & Security Resources; NYSED Data Privacy & Security Resources for Families & Educators 

• For Information about the Student Privacy Pledge created through collaboration between the Future of Privacy Forum & the Software & Information Industry Association to demonstrate commitment to privacy & security protections for student data: Student Privacy Pledge

• Family/Parent Resources to learn more about how to protect your child's data: 

  • iKeepSafe Family Resources for Protecting Student Privacy 

  • Student Privacy Compass for Parents: Protecting Student Data Privacy 

  • Common Sense Media: Resources for Families 

  • Common Sense Kids Action Common Sense is the nation's leading nonprofit organization dedicated to improving the lives of all kids and families by providing the trustworthy information, education, and independent voice they need to thrive in the 21st century.

  • Common Sense Media Common Sense is the nation's leading nonprofit organization dedicated to improving the lives of all kids and families by providing the trustworthy information, education, and independent voice they need to thrive in the 21st century.

  • Online Privacy and Safety Resources Online privacy and safety resources from NYSED

  • Parent Fact Sheet Parent fact sheets from NYSED

  • StaySafeOnline National Cybersecurity Alliance: Learn how to protect yourself, your family and your devices with these tips and resources.

  • STOP.THINK.CONNECT. PARENT AND EDUCATOR RESOURCES  When your child wants to go over to a new friend’s house, you probably ask questions. Who else is going? Will the parents be home? We should be having the same discussion with our kids about their Internet use. Which websites are okay to visit? What kind of information is acceptable—and more importantly, what is not—to share online? 

  • Family Engagement Resources Boost your family engagement program with articles, videos, and ready-made presentations about online safety and privacy.

  • FTC: Protecting Kids Online How to talk to your kids about being online, and how to help them make good decisions and stay safe.

  • Google Safety Center Children today are growing up with technology, not growing into it like previous generations. So we’re working directly with experts and educators to help you set boundaries and use technology in a way that’s right for your family.

  • Optimum Online Security Identity Protection Protect your identity. Phishing scams are a common way people are tricked into providing personal information via email. Commonly, the email appears to come from a trusted source, like a large, known organization, and asks recipients to click on a link in order to verify or update contact details or credit card information.

  • Verizon Parent Controls Parental Controls - Your Verizon router comes with parental controls designed to allow control of Internet access on all devices connected to your home network. Prevent your children from attempting to access inappropriate website with the below steps.