Communicating Student Data Privacy Practices to School Families

Student data privacy is a topic that families increasingly care about and that schools often explain poorly. A brief, clear newsletter section on what data the school collects, why, who sees it, and what protections are in place builds more trust than a 40-page district privacy policy that no one reads.

Explain the Foundational Laws

FERPA and COPPA are the two laws that matter most to families. FERPA gives parents the right to review their child's education records, request corrections, and control who outside the school sees those records. COPPA restricts how online platforms collect data from children under 13.

A brief, plain-language explanation of each law, focused on what rights it gives families and how the school complies, is more useful than citing the statute. "Under FERPA, you have the right to review your child's school records at any time. Contact [role] to request access."

Describe What the School Collects

Name the categories of student data the school collects: academic records, attendance, assessment scores, behavior records, health records maintained by the nurse, and digital activity logs from school devices. Tell families who within the school has access to each category and under what circumstances information may be shared with outside parties.

Be Transparent About Third-Party Platforms

If the school uses platforms like Google Workspace for Education, Canvas, Clever, or any other service that processes student data, families should know. The newsletter should name the platforms, describe what student data each one receives, confirm that the platform has signed a data privacy agreement, and explain what opt-out options are available if any.

Families who discover that student data was shared with a platform they were not told about react very differently than families who received advance notice and an explanation.

Address Photo and Video Consent

School newsletters, websites, social media, and publications regularly feature student images. The consent process for this use of student images should be explained clearly: what the release covers, how families can review or update their consent, and what happens when a family opts out.

Tell Families How to Exercise Their Rights

The most important part of a data privacy newsletter section is telling families how to act on their rights. How do they request a review of their child's records? How do they opt out of specific data sharing? Who do they contact with questions? Rights without a process for exercising them are not meaningful. The newsletter closes that gap.