Student Data Privacy
Southwest Cooperative takes the privacy of our students' data seriously. This page intends to make our efforts transparent, and we have been working diligently to be compliant with the Student Online Personal Protection Act (SOPPA) since its effective date of July 1, 2021.
What is SOPPA?
What happens to the student data that we send to a third-party vendor? Information like names, birthdates, etc. may be provided by Southwest Cooperative to a third party like IXL, NWEA MAP, etc. What protections do those companies have in place to make sure that our student's data is not sold or freely given to others? This is exactly what SOPPA looks to address. As part of SOPPA, these companies must enter into Data Privacy Agreements (DPA) with each district they work with. These agreements outline what data is stored, how it is protected, what the company can and cannot do with that data, and what they will do in the event of a data breach.
Below is a high-level overview of the new requirements. Please refer to the legislation for specific timelines and components of each element. The Cooperative must:
- Annually post a list of all operators of online services or applications utilized by the district.
- Annually post all data elements that the school collects, maintains, or discloses to any entity. This information must also explain how the school uses the data, and to whom and why it discloses the data.
- Post contracts for each operator within 10 days of signing.
- Annually post subcontractors for each operator.
- Post the process for how parents can exercise their rights to inspect, review and correct information maintained by the school, operator, or ISBE.
- Post data breaches within 10 days and notify parents within 30 days.
- Create a policy for who can sign contracts with operators.
- Designate a privacy officer to ensure compliance.
- Maintain reasonable security procedures and practices. Agreements with vendors in which information is shared must include a provision that the vendor maintains reasonable security procedures and practices.
Click here to read our annual notice to parents.
What are Data Privacy Agreements (DPA)?
Southwest Cooperative leverages the Student Data Privacy Consortium (SDPC), which is an unique collaborative of schools, districts, regional, territories and state agencies, policy makers, trade organizations, and marketplace providers addressing real-world, adaptable, and implementable solutions to growing data privacy concerns. If you would like to read more about the SDPC, click here. Through the SDPC we enter into contracts with 3rd party vendors who handle our student's data.
If you would like to view the DPAs that Southwest Cooperative currently holds, please use this link: https://sdpc.a4l.org/district_listing.php?districtID=10595