TRY ME!
Protecting Student Information Online
Summary
Under FERPA, schools must protect student records, even if initially non-confidential. If a school employee disclosed information, the school should assist in its removal from external sites. Contact your school’s administration or the California Department of Education for guidance.Full Conversation
I wanted to know if a student or two participated in sports and the results were posted which had the directories information and the following year the student had some thing where some of the information with in the old records was now disclosing information that would be considered PII and some of the information is now in students confidential file file how would that information need to be protected or would it not need to be protected because at the time it wasn't confidental
Hi Jon, thank you for providing the details. Here's some general information on handling Personally Identifiable Information (PII) in California:
- Under FERPA (Family Educational Rights and Privacy Act), schools must protect identifiable information in education records.
- Once information becomes confidential, it should be treated as such, even if it wasn't initially.
- Schools must ensure the confidentiality and security of PII once it is classified as such.
For specific guidance, you may contact the California Department of Education.
Do you have any other questions or need more information?
- Under FERPA (Family Educational Rights and Privacy Act), schools must protect identifiable information in education records.
- Once information becomes confidential, it should be treated as such, even if it wasn't initially.
- Schools must ensure the confidentiality and security of PII once it is classified as such.
For specific guidance, you may contact the California Department of Education.
Do you have any other questions or need more information?
Yes what if the information wasn't actually in the confidential file but all of it eluded and could be connected or tied to it so like if they were designations of sex and the student was made to participate on a team that didnt align with their sex after their transition. Would that be something under ferpa the student can request to erase and challenge because of its nature?
Under FERPA, students have the right to challenge and request the amendment of records they believe to be inaccurate, misleading, or in violation of their privacy rights. If the information indirectly identifies the student or reveals sensitive details, the student may have grounds to request its removal.
You might consider contacting your school’s FERPA compliance officer for specific steps on how to proceed.
Do you have any other questions or need more details?
You might consider contacting your school’s FERPA compliance officer for specific steps on how to proceed.
Do you have any other questions or need more details?
i dont think my school has a ferpa compliance counselor its a high school
Hi Jon,
If your high school doesn't have a FERPA compliance officer, you can still address your concerns. Here's what you can do:
- Contact your school’s administration or principal directly to raise your concerns.
- You can also reach out to the California Department of Education for guidance.
Phone: (*) *-*
Website: www.cde.ca.gov
Would you like more information on the process of challenging records under FERPA?
If your high school doesn't have a FERPA compliance officer, you can still address your concerns. Here's what you can do:
- Contact your school’s administration or principal directly to raise your concerns.
- You can also reach out to the California Department of Education for guidance.
California Department of Education
Phone: (*) *-*
Website: www.cde.ca.gov
Would you like more information on the process of challenging records under FERPA?
well i have already formally requested to amend the record but the registrar is new and said when they spoke with the principal the principal suggested i reach out to the sites the info was disclosed since not all the publications or websites are in use anymore
Since you've already formally requested to amend the record and the registrar has advised you to contact the sites where the information was disclosed, here are some steps you can consider:
- **Document All Requests:** Keep a record of all your communications and requests to amend the records.
- **Contact Websites/Publishers:** Reach out to the websites or publications that have shared the information to request its removal or correction.
- **Follow Up:** Ensure you follow up with these sites if you do not receive a response.
Do you need further assistance with contacting specific sites or additional guidance on this process?
- **Document All Requests:** Keep a record of all your communications and requests to amend the records.
- **Contact Websites/Publishers:** Reach out to the websites or publications that have shared the information to request its removal or correction.
- **Follow Up:** Ensure you follow up with these sites if you do not receive a response.
Do you need further assistance with contacting specific sites or additional guidance on this process?
well i thought that under ferpa its the schools responsibility to see that all students records are maintained and protected under ferpa
Under FERPA, schools are responsible for protecting student records and ensuring their confidentiality. However, if the information has been published externally, the school may have limited control over those external sources. Here’s what you can do:
- **Request School Assistance:** Ask the school to formally request the removal of the information from external sites.
- **Direct Contact:** Continue contacting the sites yourself for removal.
Would you like more specific advice on contacting these external sites?
- **Request School Assistance:** Ask the school to formally request the removal of the information from external sites.
- **Direct Contact:** Continue contacting the sites yourself for removal.
Would you like more specific advice on contacting these external sites?
so you are saying even though i did not post the information rather a track employee did and they posted the info to athletic websites like: athletic.net whose policy sense not in order for that information to be removed it would have to be requested by the school, and another website where they are they state that CIF follows THE school policy on FERPA and protects student records
It sounds like you’re dealing with information that was posted by a school employee and now needs to be removed. Here are some key points and steps you can take:
- **FERPA Responsibilities:** Schools must ensure the protection of student records, even if posted by employees.
- **School Request:** Since the information was posted by a school employee, the school should assist in requesting its removal.
- **Contact Websites:** Continue reaching out to the websites directly, stating the information is protected under FERPA and needs to be removed.
Would you like specific guidance on drafting a request for the school or the websites?
- **FERPA Responsibilities:** Schools must ensure the protection of student records, even if posted by employees.
- **School Request:** Since the information was posted by a school employee, the school should assist in requesting its removal.
- **Contact Websites:** Continue reaching out to the websites directly, stating the information is protected under FERPA and needs to be removed.
Would you like specific guidance on drafting a request for the school or the websites?
so what does responsible mean in ferpa's case is my request and assumption that they should and are the ones repsonisible for fixing this to be correct
Under FERPA, "responsible" means that schools must protect and maintain the confidentiality of student records. If a school employee posted the information, the school should assist in requesting its removal from external sites.
Would you like help drafting a request to the school or websites?
Would you like help drafting a request to the school or websites?
to the school please. I had followed up on the progress and asked for any updates and this is the email i received back: Hi Samuel,
I checked with the principal after reviewing some of the sites you provided. Some of them are publications out of our school and others are no longer maintained by anyone. He suggested you contact the newspapers directly. I was reviewing them and am a bit stuck on how to proceed. I was in the midst of the beginning of a new school year but have not forgotten about it.
Lets talk soon and see if you can help me with a solution to this as I do not know how all of these can be fixed to meet your request. this is kind of what i wanted to reply with but youlll let me know Dear Ms. Quiroz,
Thank you again for your continued attention to my formal amendment request. I understand that the principal initially suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
Key Points:
*. School's Responsibility for PII Disclosure:
As per FERPA and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, I believe it is the school's responsibility to ensure its removal from any platforms where it appears.
*. My Efforts So Far:
I have already reached out to several third-party websites, but I’ve encountered a challenge. Some of these websites have terms of service that explicitly state they only respond to removal requests from the original party who posted the information—in this case, the school. As a result, despite my repeated attempts, the websites are not able to take action based on my requests alone. It is therefore critical that the school intervene to address this directly with the websites.
*. Website Policies:
In addition to requiring removal requests from the original poster, these websites also have clear terms of service that prohibit acts which may harm minors or violate privacy rights. This aligns with my request, and further underscores why the school should take action to ensure that my personal information is promptly removed.
*. Request for Principal's Involvement:
Given these factors, could you please relay to the principal that, while I appreciate the suggestion to contact the websites myself, their terms require the school to initiate the removal process? I would appreciate the school’s assistance in continuing to follow up with any websites or publications that have not yet complied with the request to remove my personal information.
Thank you again for your time and support. I look forward to any further steps the school will take to help resolve this matter and ensure the protection of student information in the future.
Best regards,
[Your Full Name]
[Your Contact Information]
[Your Relationship to the School (e.g., Former Student, Parent of a Student, etc.)]
Sure, here’s a refined version of your draft:
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party who posted the information—in this case, the school. Despite my repeated attempts, the websites are not able to take action based on my requests alone. It is therefore critical that the school intervene to address this directly with
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party who posted the information—in this case, the school. Despite my repeated attempts, the websites are not able to take action based on my requests alone. It is therefore critical that the school intervene to address this directly with
do you have a citation for the info about number *
Certainly! For your key point about the school's responsibility for Personally Identifiable Information (PII) under FERPA, you can refer to the following sources:
- *** U.S.C. § 1232g - Family Educational Rights and Privacy Act (FERPA):** This federal law mandates that educational institutions must protect the privacy of student education records and provides guidelines on how they should handle and disclose PII.
- *** CFR Part * - FERPA Regulations:** These regulations detail the responsibilities of educational institutions in maintaining the confidentiality and integrity of student records.
Would you like more specific citations or further assistance with your letter?
- *** U.S.C. § 1232g - Family Educational Rights and Privacy Act (FERPA):** This federal law mandates that educational institutions must protect the privacy of student education records and provides guidelines on how they should handle and disclose PII.
- *** CFR Part * - FERPA Regulations:** These regulations detail the responsibilities of educational institutions in maintaining the confidentiality and integrity of student records.
Would you like more specific citations or further assistance with your letter?
yes can you add this to the letter while still creating a professional and respectful tone
Certainly! Here is the revised letter with the citations added:
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA (* U.S.C. § 1232g) and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party who posted the information—in this case, the school. Despite my repeated attempts, the websites are not able to take action based on my requests alone.
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA (* U.S.C. § 1232g) and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party who posted the information—in this case, the school. Despite my repeated attempts, the websites are not able to take action based on my requests alone.
just wondering how come you only listed one of them as opposed to both?
To clarify, are you asking why only one citation was provided in the revised letter? If so, here is a revised version including both relevant citations:
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA (* U.S.C. § 1232g) and its regulations (* CFR Part *), the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party who posted the information—in this case
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA (* U.S.C. § 1232g) and its regulations (* CFR Part *), the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party who posted the information—in this case
yes
Certainly! Here is the revised version of the letter, including both citations:
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA (* U.S.C. § 1232g) and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
- Additionally, per FERPA regulations (* CFR Part *), educational institutions must maintain the confidentiality and integrity of student records.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party
---
Dear Ms. Quiroz,
Thank you for your continued attention to my formal amendment request. I understand the principal suggested I reach out to the third-party websites regarding the improper disclosure of my personal information. While I’ve taken proactive steps in contacting some of these websites, I believe it’s important to note that the responsibility for this issue ultimately lies with the school, given that the disclosure originated from San Marino High School.
**Key Points:**
*. **School's Responsibility for PII Disclosure:**
- As per FERPA (* U.S.C. § 1232g) and CIF privacy laws, the school is obligated to protect student information, regardless of where it was published or who now controls the websites. Since this information was disclosed by the school or its staff members, it is the school's responsibility to ensure its removal from any platforms where it appears.
- Additionally, per FERPA regulations (* CFR Part *), educational institutions must maintain the confidentiality and integrity of student records.
*. **My Efforts So Far:**
- I have reached out to several third-party websites, but their terms of service explicitly state they only respond to removal requests from the original party
i was just wondering why you didnt originally add both of them?\
I aimed to keep the letter concise, focusing on the essential point. Including both citations now ensures thorough support for your argument. Is there anything else you need assistance with or would you like further revisions?
Start a new chat