COPPA – The Children’s Online Privacy Protection Act
-
Children younger than 13 cannot be required to give out more information "than is reasonably necessary" to participate in a site's activities.
-
Web site operators must obtain parental permission to collect personal information from children younger than 13.
-
Parents have the right to know what personal information is being collected and how it will be used.
-
Parents have the right to review any information collected, determine whom it can be given to, and/or have the information deleted.
-
Parental permission must be verifiable.
Overall: COPPA puts special restrictions on software companies about the information they can collect about students under 13. So, students under 13 can't make their own accounts, teachers have to make the accounts for them. In making the accounts, teachers need to be aware of their responsibility under FERPA.
FERPA – The Family Educational Rights and Privacy Act
Parents or eligible students have the right to inspect and review the student's education records maintained by the school. Schools are not required to provide copies of records unless, for reasons such as great distance, it is impossible for parents or eligible students to review the records. Schools may charge a fee for copies.
Parents or eligible students have the right to request that a school correct records which they believe to be inaccurate or misleading. If the school decides not to amend the record, the parent or eligible student then has the right to a formal hearing. After the hearing, if the school still decides not to amend the record, the parent or eligible student has the right to place a statement with the record setting forth his or her view about the contested information.
Generally, schools must have written permission from the parent or eligible student in order to release any information from a student's education record. However, FERPA allows schools to disclose those records, without consent, to the following parties or under the following conditions (34 CFR § 99.31):
-
School officials with legitimate educational interest;
-
Other schools to which a student is transferring;
-
Specified officials for audit or evaluation purposes;
-
Appropriate parties in connection with financial aid to a student;
-
Organizations conducting certain studies for or on behalf of the school;
-
Accrediting organizations;
-
To comply with a judicial order or lawfully issued subpoena;
-
Appropriate officials in cases of health and safety emergencies; and
-
State and local authorities, within a juvenile justice system, pursuant to specific State law.
Schools may disclose, without consent, "directory" information such as a student's name, address, telephone number, date and place of birth, honors and awards, and dates of attendance. However, schools must tell parents and eligible students about directory information and allow parents and eligible students a reasonable amount of time to request that the school not disclose directory information about them. Schools must notify parents and eligible students annually of their rights under FERPA. The actual means of notification (special letter, inclusion in a PTA bulletin, student handbook, or newspaper article) is left to the discretion of each school.
Overall: FERPA requires that schools have written permission from the parent or guardian in order to release any information from a student's education record. So the most important thing is that, with some very specific exceptions, you shouldn't be sharing student information with apps and websites without parent permission.
CIPA – The Children’s Internet Protection Act
Overall: CIPA requires districts to put measures in place to filter Internet access and other measures to protect students.