Parents Bill of Rights for Data Privacy and Security

It is the North Syracuse Central School District’s responsibility to adopt appropriate administrative, technical, and physical safeguards and controls to protect and maintain the confidentiality, integrity and availability of its data, data systems and information technology resources.  All stakeholders, including students, teachers and administrators should be aware of their rights and expect their data to be kept private and confidential. 

In order to provide a successful educational program, the North Syracuse Central School District receives, creates, archives, and transfers sensitive, private information about students, teachers, and principals protected by both state and federal law. The North Syracuse Central School District takes active measures to protect confidential information in compliance with all state and federal laws. The District expects all employees and partners to maintain the confidentiality of protected information in compliance with state and federal law and applicable board policies.
 
The District is committed to protecting the privacy and security of data in accord with New York Education Law Section 2-d.

Data Privacy and Protection
Education Law 2-D is a New York State law requiring school districts to take significant measures to secure and protect the personally identifiable information (PII) of students, classroom teachers, and building principals. The District provides annual training for all employees who have access to protected data.

A Parents Bill of Rights for Data Security and Privacy supplemented with information about each agreement with third party contractors is available by clicking here.

The North Syracuse Central School District applies the planning, processes, and categories of information defined within the National Institute of Standards and Technology (NIST) Cybersecurity Framework to all its District practices.  Whenever a third-party vendor receives PII, the District will ensure that the agreement for using the product or services includes required language.

The District has published a complaint process accessible to students, parents, teachers, and building principals and has developed procedures for reporting and notifying when a breach or unauthorized disclosure occurs. These are available on the NSCSD website at www.nscsd.org.
Jason Clark, Director of Technology is the Data Protection Officer (DPO) who oversees implementation of Education Law 2-D responsibilities. 
 
Supplemental Information Regarding Third Party Contractors
 
Any and all contracts between the North Syracuse Central School District and third-party contractors, under which a contractor will receive student data or principal or teacher data, shall include provisions requiring that the contractor maintain the confidentiality of shared student data or teacher or principal data in accordance with law, regulation and District policy. For information about these vendors click here for the approved vendor contracts.

In addition, the District will ensure that the contract or written agreement with a third party contractor includes a signed copy of the Parents Bill of Rights and the contractor’s privacy and security plan, in compliance with Part 121 of the Commissioner’s regulations.

Click here for the approved vendor contracts.

Vendors that need to complete a Data Security and Privacy Contract, can click here for a downloadable form.  
 
Parent Complaints
 
Any parent, eligible student, teacher or principal or eligible staff may file a complaint with the District regarding a breach or unauthorized release of student data and/or teacher or principal data by filing a written complaint with the District’s Data Protection Officer.
 
For more information regarding the District’s policy regarding data security, please see the complete Board of Education Policy 4202.3.
 
Questions regarding data privacy and security may be directed to the Data Protection Officer:
 
Jason Clark
Director of Technology
jclark@nscsd.org
315-218-2040