ED Law §2-D & Data Privacy and Security
New York State Education Law §2-d Part 121 of the Commissioner's Regulation requires that each educational agency shall publish their Data Security and Privacy Policy and their Parents' Bill of Rights for Data Privacy and Security.
The law also requires that with each contract an educational agency enters with a third-party contractor, that receives personally identifiable information (PII), must contain a signed bill of rights and supplemental information. In turn, each educational agency will have to publish, on its website, the signed bill of rights and supplemental information to the bill of rights for each software contract.
Data Protection Officer (DPO)
Name: Jennifer Lynch
Email: jlynch@bmcsd.org
Phone: 518-529-7342
Mailing Address: 758 County Route 7 Brushton, NY 12916
District Security and Privacy Policies
Protection of Pupil Rights Amendment (PPRA)
District Data Privacy Inventory Tool (DPIT)
The Data Privacy Inventory Tool compiles a list of district software as required by Education Law §2-d Part 121 Regulations. It provides a means for sharing our parents' bill of rights, supplemental information, and compliance with components of the NIST Cybersecurity Framework.
Key Categories of the Data Privacy Inventory Tool
Contract Source: How the software product is procured; either BOCES, District, or District - Free
Supporting Documentation: Document links or attachments to signed parent's bill or rights and supplemental information
Note: Information posted in the data privacy inventory tool is continually updated.