SOPPA Requirements:
Enter into written agreements with all K-12 service providers who collect student data. Covered data includes, but is not limited to: information in the student's educational record, first/last name, address, phone number, email address, grades, test results, socioeconomic information, photos, search activity, voice recordings, geolocation information, and more.

Implement and maintain reasonable security practices. Student data is protected through comprehensive privacy policies and security measures such as firewalls, secure servers, intrusion detection software, and other methods. Written agreements with vendors require that the vendor also maintains security procedures.
Post a list of operators. This list will include what data elements are shared, written agreements/contracts with the operator within 10 days of signing, & subcontractors for each operator.

District-Approved Student Data Applications/Agreements:
Marengo-Union ECSD165: Annual List of Operators 2022-2023

Parent/Guardian Rights:
Parents/guardians have the right to inspect, review, and correct information maintained by the school, operator, and the Illinois State Board of Education. All requests should be directed to the following form: Parent Request for Student Data Review or Changes

Data Breaches:
In the event that there is a data breach, the District will notify parents/guardians via district communication systems within 30 days the data breach and within 60 days if a third-party is responsible for the data breach.

ISPA:
Marengo-Union ECSD165 is a member of the ISPA. The Illinois Student Privacy Alliance (ISPA) is a free consortium that allows school districts to access management tools and resources for data privacy agreements. When used in conjunction with clear policies and procedures, ISPA allows districts to comply with Illinois’ new Student Online Personal Protection Act (SOPPA).

Illinois Student Privacy Alliance Webpage:
https://sdpc.a4l.org/about_alliance.php?state=IL

Personally Identifiable Information (PII) can include but is not limited to:
Information in the students educational record such as; First and Last Name, Gender, Grade Level, Email (School Email account), Home Address, Phone Number, Grades, Discipline Records, Test Results, Special Education Data, Evaluations, Personal Characteristics, Demographic Data, Socioeconomic Information, Juvenile Dependency Records, Criminal Records, Medical Records, Food Purchases, Political Affiliations, Religious Information, Geolocation Information, Photos, Documents, Messages, and Search Activity. 

In accordance with any applicable federal regulations, a school must provide a student’s parent a paper or electronic copy of the student’s covered information, including any covered information maintained by an operator or the State Board, within 45 days of receiving a request for such information, as provided under subsection (b).

a) If a parent requests an electronic copy of the student's covered information, the school must provide an electronic copy of that information, unless the school does not maintain the information in an electronic format and reproducing the information in an electronic format would be unduly burdensome to the school.

b) Each request under this Section must be submitted by a parent on a signed and dated request form that includes the parent’s name, address, phone number, student’s name, and the name of the school from which the request is being made. A school that receives a request under this Section must require a parent to provide proof of identity and relationship to the student before access to the covered information is granted.

c) If covered information requested by a parent under this Section includes data on more than one student, the parent may inspect and review only the covered information relevant to the parent’s student.

d) A parent may make no more than one request under this Section per State fiscal quarter.

Cost for Copies

a) A school may not charge a parent for an electronic copy of a student’s covered information.

b) If a parent requests a paper copy of a student’s covered information, a school may charge the parent the actual cost for providing a copy of such information, provided that the cost charged shall not exceed $0.35 per page. No parent shall be denied a requested paper copy of covered information due to the parent’s inability to bear the cost of the copying.

Parents or Guardians who would like to request a copy of their student's covered information can proceed by submitting the following form: Parent Request for Student Data Review or Changes

Marengo-Union ECSD165 will inform parents within 30 days of a data breach involving 10% or more of students.