Student Data Privacy

Image with lock says student data privacy

Student Data Privacy

Effingham CUSD 40 takes student privacy and online safety seriously. Effective July 1, 2021, the Student Online Personal Protection Act (SOPPA) requires school districts to provide guarantees that student data is protected when collected by educational companies and that the data is used for beneficial purposes only. As part of SOPPA, these companies must enter into Data Privacy Agreements (DPAs) with the District. The District belongs to the Illinois Student Privacy Alliance (ISPA) which is part of the Student Data Privacy Consortium (SDPC) and uses their database to manage the DPAs. The DPAs outline what data is stored, how it is protected, what the company can and cannot do with that data, and what they will do in the event of a data breach.

Approved Resources
Unit 40's approved online resources and data privacy agreements

The list linked above includes the online services or applications that the District uses, the contracts signed by the District, and any data collected. The District regularly updates and verifies applications and tools.

Staff, all digital resources that collect student data will need to be reviewed, approved, and have a data privacy agreement in place prior to use. If you do not see your resource on the approved you list, you may request an agreement by completing the "Digital Resource Request Form"Please note that verification can take several weeks from the time the request is submitted until the time the application or tool may be used.

lock on computer for privacy

Informational Links 

Parent Guides

Parents play a key role in overseeing the online safety of their children. ConnectSafely, a nonprofit dedicated to educating users of connected technology about safety, privacy, security, and digital wellness, has developed a growing collection of parent guidebooks to help parents navigate the digital world of apps, services, and platforms with their children.

Data Breaches

Unit 40 will post details below for breaches involving 10% or more of the district's students. In the event of a breach, parents of students impacted will be notified within 30 days.