Skip To Main Content

Student Data Privacy and Security

8635-E Parents’ Bill of Rights for Student Data Privacy and Security

The Clinton School District, in recognition of the risk of identity theft and unwarranted invasion of privacy, affirms its commitment to safeguarding student personally identifiable information (PII) in educational records from unauthorized access or disclosure in accordance with State and Federal law. The Clinton School District establishes the following parental bill of rights:

  • Student PII will be collected and disclosed only as necessary to achieve educational purposes in accordance with State and Federal Law.
  • The district and its schools, and third-party contractors and subcontractors, will not sell student PII or use or disclose it for any marketing or commercial purposes or facilitate its use or disclosure by any other party for any marketing or commercial purpose or permit another party to do so.
  • Parents have the right to inspect and review the complete contents of their child's education record (for more information about how to exercise this right, see 5500-R);
  • State and federal laws, such as NYS Education Law §2-d and the Family Educational Rights and Privacy Act, protect the confidentiality of students’ personally identifiable information. Safeguards associated with industry standards and best practices, including but not limited to, encryption, firewalls, and password protection, must be in place when data is stored or transferred;
  • A complete list of all student data elements collected by the State Education Department is available for public review at http://nysed.gov/data-privacy-security/student-data-inventory or by writing to: Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234
  • Parents have the right to have complaints about possible breaches and unauthorized disclosures of student data addressed. Complaints should be directed to (insert district contact information including title, phone number, email and mailing address here). Complaints can also be directed to the New York State Education Department online at http://nysed.gov/data-privacy-security/report-improper-disclosure, by mail to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234 or by email to privacy@nysed.gov or by telephone at 518-474-0937.
  • Parents have the right to be notified in accordance with applicable laws and regulations if a breach or unauthorized release of their student’s PII occurs.
  • All district and school employees and officers with access to PII will receive annual training on applicable federal and state laws, regulations, district and school policies and safeguards which will be in alignment with industry standards and best practices to protect PII
  • In the event that the District engages a third party provider to deliver student educational services, the contractor or subcontractors will be obligated to adhere to State and Federal Laws to safeguard student PII. Parents can request information about third party contractors by contacting the Superintendent of Schools, Clinton Central School District, 75 Chenango Avenue, Clinton, NY 13323 or can access the information on the district’s website www.ccs.edu.

Parent Bill of Rights for Student Data Privacy and Security Third Party Contractor Supplement

The (insert name of contractor) has been engaged by the Clinton Central School District to provide services. In this capacity, the company may collect, process, manage, store or analyze student or teacher/principal personally identifiable information (PII).

The (insert name of contractor) will provide the district with (describe specific purpose for which the PII will be used).

The (insert the name of contractor) will ensure that subcontractors or others that the company shares PII will abide by data protection and security requirements of district policy, and state and federal law and regulations by (describe methods/procedures to safeguard data use by subcontractors).

PII will be stored (describe the location in a manner that protects data security). Parents may challenge the accuracy of PII held by (insert name of contractor) by contacting (insert contact information, including title, phone number, mailing address and email address).

The (insert name of contractor) will take reasonable measures to ensure the confidentiality of PII by implementing the following (describe the following, as applicable):

  • Password protections
  • Administrative procedures
  • Encryption while PII is in motion and at rest
  • Firewalls


The contractor’s agreement with the district begins on (insert date) and ends on (insert date). Once the contractor has completed its service to the district, records containing student PII will be (select one: destroyed or returned) by (insert date) via the following (insert method if destroyed or format if returned).

Adoption Date: July 7, 2020 (originally appeared as a regulation 8635-R adopted August 2014)

Revised Dates: October 26, 2021