Cornwall Central School District

Data Privacy & Security

Parent & Student Rights

In January 2020, the NYSED Board of Regents adopted Part 121 of the Commissioner's Regulations for the Strengthening of Data Privacy and Security in NYS Educational Agencies to protect Personally Identifiable Information (PII) pursuant to Education Law sections 2-D, 101, 207, and 305.

The Cornwall Central School District will ensure that whenever it enters into a contract or other written agreement with a third-party contractor under which the third-party contractor will receive student data or teacher or principal data, the contract or written agreement will include provisions requiring that confidentiality of shared student data or teacher or principal data be maintained in accordance with law, regulation, and Cornwall CSD policy.

Data Privacy Officer
Karen Brooks, Director of Data & instructional Technology

Click here to Contact

Fact Sheet For Parents

Education Law § 2-d protects student personally identifiable information (PII) from unauthorized disclosure. Additionally, this law provides parents with rights regarding their child's PII. The parent fact sheet explains these rights.
- Parent Bill of Rights
- Unauthorized Disclosure Complaint Form
Federal Laws that Protect Student Data
- Family Educational Rights and Privacy Act (FERPA) – The foundational federal law on the privacy of students’ educational records, FERPA safeguards student privacy by limiting who may access student records, specifying for what purpose they may access those records, and detailing what rules they have to follow when accessing the data.
- Protection of Pupil Rights Amendment (PPRA) – PPRA defines the rules states and school districts must follow when administering tools like surveys, analysis, and evaluations funded by the US Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies in place regarding how the data collected through these tools can be used.
- Children's Online Privacy Protection Rule (COPPA) – COPPA imposes certain requirements on operators of websites, games, mobile apps or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.