1 of 19

Student Data Privacy Consortium (SDPC)

SDPC - Iowa Alliance

#itecia

2 of 19

2

The Iowa Alliance is a partnership between

the Iowa Department of Education

and Iowa’s AEAs

#itecia

3 of 19

Who Should be Interested in the IA Alliance of the SDPC and Why?

  • All Iowa PK-12 organizations including LEAs, AEAs, and the DE.
  • Learn the best practices for data management and privacy when engaging with vendors that collect, store, and use student data.
  • Help ensure EdTech is leveraged to improve teaching & learning while maintaining data privacy.
  • Help ensure legal compliance with COPPA, HIPAA, FERPA, etc.
  • Have an agreement that meets PK-12 needs, rather than just the standard ToS from the vendor.
  • Know that your EdTech use, regardless of platform, is in compliance with State (Iowa) and federal laws without cost.

https://privacy.A4L.org

4 of 19

What is the SDPC?

  • Began in 2015 due to numerous stakeholders addressing on-the-ground, tactical student data privacy pain points.
  • Organized as a Special Interest Group (SIG) under the Access 4 Learning (A4L) Community a 501(c)3 Member Tech Standards Organization). About A4L
  • Schools, districts, regional and state education agencies, other professional organizations and vendors as members.
  • Own governance, oversight and resource support.
  • Supported through membership dues.

https://privacy.A4L.org

5 of 19

Student Data Privacy Consortium (SDPC) goals

https://privacy.A4L.org

6 of 19

Privacy By the Numbers… (Updated 5/2/2024)

https://privacy.A4L.org

7 of 19

What are Alliances?

  • A group of school districts, service agencies, and departments of education in one specific state, all focused on developing effective practice for student data privacy.
  • Leaders are identified in each state to help establish a community of practice around effective student data privacy strategies, tools and contract development.
  • Alliances then interact with other Alliances to create enough leverage to move the market and share effective practices in various student data privacy activities.

https://privacy.A4L.org

8 of 19

Iowa’s Alliance

Alliance Formation in Iowa

Iowa Dept. of Education, Iowa’s AEAs and Iowa’s LEAs are leading the effort to develop and grow the IA-Alliance

https://privacy.A4L.org

9 of 19

Iowa’s Alliance Leadership?

Iowa Department of Education & Iowa’s AEAs

  • Participate in the SDPC and interact with other Alliances and Projects
  • Convene stakeholders in their state to identify pain points and gauge the interest in developing a “common contract framework and tools
  • Utilize contract wording to be used by districts and provide transparent communications to parents and community members on application usage
  • Advocate for student data privacy and support the ongoing needs of the Alliance including bringing possible projects to the larger SDPC

https://privacy.A4L.org

10 of 19

Who is leading the IA-Alliance?

Iowa Department of Education & Iowa’s AEAs & LEA Representatives

Ray Coffey - Indianola CSD [Alliance Lead]

Ryan Smith - AHSTW Schools

Sean Boyle - Heartland AEA

Matt Goblirsch - Central Rivers AEA

Amy Wichman - Heartland AEA [Alliance Lead]

Tracie Marshall - Iowa AEA Online

Coby Culbertson - Dubuque CSD

Levi Baber - Boone CSD

Jay Pennington - Iowa Department of Education

https://privacy.A4L.org

11 of 19

Iowa’s Alliance Progress So Far

  • November 2021 - Idea brought forward from DE to Iowa AEA Media Directors
  • Governance Structure Determined
    • Initial leadership group recruited.
  • National Data Privacy Agreement (NDPA) adopted for Iowa.
    • (Reviewed by Iowa DE Legal Counsel and Presented for review to Iowa Association of School Board Attorneys & Iowa Association of School Business Officials)
  • Development of Software / App approval best practice flow chart.
  • Software / App Inventory (example)
  • Developed Training & Onboarding
    • Module 1 Training Now Available & Added to Iowa AEA Online
    • Ready for Launch!

https://privacy.A4L.org

12 of 19

How Does the IA-Alliance Lead Support Districts?

Registry Access

    • Alliances identify an easy way for LEAs to access its Alliance site.

Legal

    • The Iowa Department of Education reviewed the NDPA and it’s alignment to Iowa code, ensuring agreements signed meet the letter of the law in Iowa.

Training

    • The Iowa Alliance worked with AEA Learning Online to create asynchronous onboarding and training modules for members.

    • Onboarding and Training is now available!

https://privacy.A4L.org

13 of 19

How Can the Alliance Lead & Support Districts?

Site Monitoring

Alliances monitor the registry to ensure fidelity of data and to ensure Exhibit Es are added correctly to allow others to download and co-sign.

Also monitoring the registry for broken agreement hyperlinks, so that co-signing LEAs have access to the Originating DPA.

Ongoing Assistance

    • Alliances determine the level of ongoing support for LEAs for questions and feedback.
    • Alliances help address member’s issues with DPAs or vendor partner issues.
    • Alliances advocate for its Members at the Community’s Alliance-level collaborations.

https://privacy.A4L.org

14 of 19

Which Districts Utilize the National SDPC?

  • Search by Resource Name -> SeeSaw
      • Example with Exhibit E / “General Offer of Privacy Terms” (e.g. Cupertino Union [page 6])
      • Example of schools utilizing Exhibit E (e.g. Pleasant Valley School District [page 10])
  • We cannot piggyback on other states, but can within our state using Exhibit E

https://privacy.A4L.org

15 of 19

Which Districts Utilize the National SDPC?

What Happens When a Vendor Disagrees?

  • Example with Exhibit H / “Additional Terms or Modifications” (e.g. Tyler Technologies)
      • You can have a vendor with both Exhibit H & E
      • Be sure your district and/or legal counsel agrees to the additional terms before signing and Exhibit E that is part of an SDPA with an Exhibit H.

https://privacy.A4L.org

16 of 19

Which Vendors are Currently Signed with the I-SDPC?

A Quick Look at the Iowa SDPA Database(Other District's Agreements -> View All State DPAs)

How Does this Number Grow?

  1. Member district sign an “originating” IA SDPA with a vendor.
    1. For Example: Indianola - Incident IQ
  2. Member districts sign an Exhibit E
    • Others using Incident IQ sign the Exhibit E from Indianola’s originating SDPA.

https://privacy.A4L.org

17 of 19

Next Steps

  • We are now ready to grow our Iowa Alliance membership, which is FREE to Iowa schools!
  • Complete the online training at your own convenience.

https://privacy.A4L.org

18 of 19

How to Get Started?

https://privacy.A4L.org

19 of 19

Thank you!

Any questions?

19

Link to this presentation:

https://bit.ly/IA-SDPC-2023

#itecia