Èý¼¶×Ôο

Student Online Personal Protection Act (SOPPA)

 

Click Here for Information on December 2024 PowerSchool Data Breach

 

What is SOPPA?

SOPPA is a state law that governs and protects the privacy and security of student data when it is shared with and collected by educational technology companies. regulates these companies who provide web-based sites, services, online and mobile applications that are used primarily for K to 12 purposes.

Currently, provides various prohibitions and responsibilities on these companies. The law has important provisions which prevent companies from engaging in targeted advertising to students, amassing a profile on students, selling or renting student information, or using student information except in limited ways. Additionally, companies must meet certain security requirements when storing student data, delete student data when requested by a district or charter school network, and maintain a public privacy policy.

SOPPA also places responsibilities on school districts and charter school networks, including requiring data sharing agreements with many of these companies. SOPPA also gives parents certain rights when it comes to their children’s data.

How Does Èý¼¶×Ôο Comply with SOPPA?

SOPPA requires that all companies with which a district or charter school network shares covered information sign a Data Sharing Agreement that outlines what data is being shared, the purpose of collecting the data and how the data will be used and protected. Èý¼¶×Ôο’ Chief Finance & Operations Officer designates who is authorized to enter into agreements with external vendors.

You can see the outside agreements with Èý¼¶×Ôο’ vendors below:

• Branching Minds SOPPA agreement (2024-25)
• Goalbook SOPPA agreement (2024-25)
• Pikmykid SOPPA agreement (2024-25)
• PowerSchool SOPPA agreement (2024-25)

Additionally, Èý¼¶×Ôο always uses robust security measuresÌýto protect the student data in its care.

How Can Parents View and Correct Student Data?

Parents may request to inspect and review their student’s covered information. Requests for reviewing records must be made in writing and include the date of the request; the parent’s name, address, and phone number; the student’s name; and the name of the school from which the request is being made. Parents will be required to provide proof of identity and relationship to the student before access to the covered information is granted. If the covered information you request includes your child’s school student records, Èý¼¶×Ôο will permit you to inspect and review any school student records of your child in accordance with Èý¼¶×Ôο’ procedures for student records requests.

Èý¼¶×Ôο shall provide an electronic copy of the records within 45 days of receiving a request for the covered information. A parent may make requests to review and receive copies of covered information no more than two times per student per quarter.

Parents may request corrections of factual inaccuracies contained in their student’s covered information. If the covered information you are requesting to be corrected includes your child’s school student records, Èý¼¶×Ôο will follow its procedures for amendment of student records with respect to those school student records. Èý¼¶×Ôο will review the request, determine if an inaccuracy exists, and if so, will make any necessary corrections within 90 days of the request. If the correction needs to be made by the Illinois State Board of Education or a Èý¼¶×Ôο vendor, any necessary corrections will also be made within 90 days of the request and Èý¼¶×Ôο will notify the parent of any necessary corrections within 10 days after receiving confirmation of the corrections.

If a parent requests the deletion of any covered information, Èý¼¶×Ôο will review the request to determine whether such a deletion would violate the law or result in the student being unable to participate in Èý¼¶×Ôο’ curriculum.

What Happens if Data is Breached?

In the unlikely situation that a vendor experiences a potential data breach, Èý¼¶×Ôο will be notified. After receiving notice of a potential breach, we will evaluate the report and if confirmed, provide notifications to parents. Information on any breach that impacts more than 10% of our students will be publicly displayed.

Èý¼¶×Ôο will also notify parents and post information in the event Èý¼¶×Ôο’ data systems are breached.

Note:Ìý A notice of breach may be delayed if a law enforcement agency determines that the notification will interfere with a criminal investigation.Ìý

If you would like more information on SOPPA, please contact info@kippchicago.org.