1 of 41

Protecting Student Privacy

What Faculty Need to Know

Michele Alaniz�City College of San Francisco�@craftyLib

2 of 41

Workshop Objectives

After this session faculty & staff will be able to

Discuss aspects of privacy with their students
Explain what is FERPA & how to go beyond basics
Practice protecting student privacy & data
Identify data collection & tracking tactics
Employ search strategies that are more privacy minded & secure

3 of 41

Why is privacy important to you? (POLL)

https://bit.ly/2L40XGs

4 of 41

5 of 41

Why is Privacy Important?

Privacy allows us to:

Be ourselves
Not be tracked by corporations and governments
Limit government power
Protest or have your own political beliefs
Have the right to be forgotten

6 of 41

FERPA: The Basics

7 of 41

The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education.

FERPA gives parents certain rights with respect to their children's education records. These rights transfer to the student when he or she reaches the age of 18 or attends a school beyond the high school level. Students to whom the rights have transferred are "eligible students."

…………………..

8 of 41

Student Privacy 101

9 of 41

FERPA and Beyond

10 of 41

What are some strategies you use to protect student privacy and data?

11 of 41

Create curriculum or assignments that minimize data collection and protects privacy

12 of 41

Protecting Student Privacy and Data

When asking students to post to public spaces (e.g. social media, blog) allow student to use an alias
Choose private vs. public settings for posted written assignments
Don’t ever publicly display PII/Grades/Student Records on monitors or large screens
Be mindful about storage and security of student work and data
Be aware of privacy policies of products or services that you expect students to use
Send students to the library’s privacy workshop

13 of 41

Privacy Practices

14 of 41

Privacy Practices

Secure or better password practices
Secure your devices with passwords
Back-up your data
Encrypt your data - this is a stretch, might delete
Use a Virtual Private Network (VPN)
Safe data transfer strategies

15 of 41

Privacy Practices

Use better, stronger passwords or passphrases

panoramic_nectar_precut_smith_banana_handclap

Is better than password or 123456789 or 87654321 or monkey or football or iloveyou or your birthday or your pet’s name

16 of 41

Peter Parker : What's your password?

Happy Hogan : Password.

Peter Parker : No, what is your password?

Happy Hogan : Password. The word spelled out.

Peter Parker : You're head of security and your password is "password"?

Happy Hogan : I don't feel good about it either.

17 of 41

Privacy Practices

2. Don’t use the same password or passphrase across numerous systems.

18 of 41

Privacy Practices

3. Use a password manager

19 of 41

Privacy Practices

4. Use Two Factor Authentication

20 of 41

Privacy Practices

5. Use a VPN

21 of 41

Privacy Practices

6. Avoid Phishing Scams

Example: https://www.wellsfargo.com/

22 of 41

Careful handling of personal identifying information

Back-up or keep data in a secure location

What do you need on your laptop/desktop and what can be backed up?
What type of data, and how much of it do you need to keep on your current device or laptop?
Delete unnecessary data or records

Use password protection or encryption on your devices
If you use a flash drive to store/transfer, secure it with a password
Use secure networks

23 of 41

Passphrase Activity

24 of 41

Data Collection & Tracking

25 of 41

Search Engine & Website Tracking

Google is a search engine, but it is also a corporation that makes billions of dollars in ad revenue. It is essentially an advertising company that provides search capabilities. We, as users of the internet, provide all sorts of data for these search engines, websites and social media sites to track and personalize advertisements towards our online activity. Cookies are files that are passed from a website to your computer. They can also be placed in ads.These cookies store data about you and allow these sites to save preferences, shopping cart data, profile information, etc. These cookies can also be used to track you depending on the type of cookie. Here are a few strategies: disable cookies in your browser, but you may be limited in accessible content on a site by site basis. Clear your cookies often. Use Privacy Badgr to block ad trackers. We’ll talk about this later in the presentation.

Image credit: https://pixabay.com/vectors/cookie-chocolate-chip-blurred-307960/

26 of 41

Library Databases & Vendors

$

27 of 41

EXAMPLE: Know the Privacy Policy

Requires users to create a LinkedIn profile using full name and email address. & user agreement allows LinkedIn to share user data with third parties

28 of 41

Safari TechBooks

29 of 41

Online Search Strategies

30 of 41

Search Engine(s)

31 of 41

Browsers & Extensions

32 of 41

Browsers & Extensions

33 of 41

Browsers & Extensions

34 of 41

Browsers & Extensions

DEMO or Screenshots

35 of 41

What other steps can you take?

36 of 41

Data cleanse

Complete the Smartphone Data detox
Backup your devices & remove any unnecessary records or data
Clear your cache
Update your software

37 of 41

Choose Privacy Week

38 of 41

Need Help?

Ask a librarian
Resources

39 of 41

Resources

Choose Privacy Week https://chooseprivacyeveryday.org/
Data Detox Kit https://datadetoxkit.org
Electronic Frontier Foundation: Privacy https://www.eff.org/issues/privacy
Privacy Class Resource List - Includes books, articles & films

40 of 41

Survey

https://www.surveymonkey.com/r/S7H5MKT

41 of 41

Questions?

Michele Alaniz, Librarian

415.452.5549 | malaniz@ccsf.edu

https://libraryfreedom.org