logo

Data Privacy and Security

District Approved Software

NYS Education Department – Data Privacy and Security

Parents Bill of Rights

The Riverhead Central School District has implemented the requirements of Education Law Section 2-d and its implementing regulations, as well as to align the Riverhead Central School District’s data privacy and security practices with the National Institute for Standards and Technology Framework for Improving Critical Infrastructure Cybersecurity (Version 1.1). With regard to personnel and business practices, this procedure is intended to supplement current policy/procedures regarding PII.

The Riverhead Central School District, in recognition of the risk of identity theft and unwarranted invasion of privacy, affirms its commitment to safeguarding student personally identifiable information (PII) in educational records from unauthorized access or disclosure in accordance with State and Federal law. The Riverhead Central School District establishes the following parental bill of rights:

  • Student PII will be collected and disclosed only as necessary to achieve educational purposes in accordance with State and Federal Law.
  • The district and its schools, and third-party contractors and subcontractors, will not sell student PII or use or disclose it for any marketing or commercial purposes or facilitate its use or disclosure by any other party for any marketing or commercial purpose or permit another party to do so.
  • Parents have the right to inspect and review the complete contents of their child’s education record (for more information about how to exercise this right, see 5500-R).
  • State and federal laws, such as NYS Education Law §2-d and the Family Educational Rights and Privacy Act, protect the confidentiality of students’ personally identifiable information. Safeguards associated with industry standards and best practices, including but not limited to, encryption, firewalls, and password protection, must be in place when data is stored or transferred.
  • A complete list of all student data elements collected by the State Education Department is available for public review at http://nysed.gov/data-privacy-security/student-data-inventory or by writing to: Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234.
  • Parents have the right to have complaints about possible breaches and unauthorized disclosures of student data addressed. Complaints should be directed to (insert district contact information including title, phone number, email and mailing address here). Complaints can also be directed to the New York State Education Department online at http://nysed.gov.data-privacy-security, by mail to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234 or by email to privacy@mail.nysed.gov or by telephone at 518-474-0937.
  • Parents have the right to be notified in accordance with applicable laws and regulations if a breach or unauthorized release of their student’s PII occurs.
  • All district and school employees and officers with access to PII will receive annual training on applicable federal and state laws, regulations, district and school policies and safeguards which will be in alignment with industry standards and best practices to protect PII.
  • In the event that the District engages a third party provider to deliver student educational services, the contractor or subcontractors will be obligated to adhere to State and Federal Laws to safeguard student PII. Parents can request information about third party contractors by contacting (insert district contact information including title, phone number, email and mailing address here) or can access the information on the district’s website (www.riverhead.net).

All software used in the District, both free and subscription-based, are vetted for compliance with New York State Education Law 2d, the Children’s Online Privacy Protection Act, and the Children’s Internet Protection Act. This is a “living” list that is updated regularly which shows the sites that have been deemed as approved for use in the District. A link to the Privacy Policy contains additional information specific to the company’s policies. In addition, where appropriate, we have included supplemental information that further explains the protection of student and staff data.

Teachers: To Request a new application please contact your content area director or building administrator.

Video Explaining Education Law Section 2-D