Student Data Privacy

Student Data Transparency and Security

Image result for student data transparency and security act



 

Under Colorado’s Student Data Transparency and Security Act, Cherry Creek Charter Academy (CCA)  is required to post and maintain the following information on its website: (1) a link to the Colorado Department of Education’s Data Dictionary; (2) a link to the Colorado Department of Education’s inventory of data containing personally identifiable information on individual students; (3) student personally identifiable information collected and maintained by CCA in its electronic-data system that is not reported to the Colorado Department of Education; (4) a list of school-service-contract providers with which CCA contracts that includes a copy of each school service contract; and (5) to the extent practicable, a list of the school service on-demand providers that CCA and/or its employees use for school services.


 

COLORADO DEPARTMENT OF EDUCATION INFORMATION

Data Privacy and Security

Data Inventory of elements collected within CDE’s student data system

Data Dictionary

 


 

FEDERAL PRIVACY LAWS

SDTSA- Colorado Student Data Transparency and Security Act (HB 16-1423)

CIPA- Children’s Internet Protection Act

COPPA- Children’s Online Privacy Protection Act

FERPA- Family Educational Rights and Privacy Act

HIPAA- Health Insurance Portability and Accountability Act


 

OTHER RESOURCES

U.S. Department of Education Protecting Student Privacy Site


 

CCA  INFORMATION

 

Student Personally Identifiable Information (SPII)

There are two types of student personally identifiable information collected and maintained by CCA in its electronic-data system that are not reported to the Colorado Department of Education: (a) directory information; and, (b) confidential student-record information.

 

Student education records are those that relate directly to a student. Student education records may contain, but not necessarily be limited to, the following information: identifying data; academic work completed; level of achievement (grades, standardized achievement test scores); attendance data; scores on standardized intelligence, aptitude and psychological tests; interest inventory results; health and medical information; family background information; teacher or counselor ratings and observations; reports of serious or recurrent behavior patterns and any Individualized Education Program (IEP).

 

CONFIDENTIAL STUDENT RECORD INFORMATION may only be disclosed as authorized under the federal Family Educational Rights and Privacy Act (FERPA) and Cherry Creek School District Policy. 

 

School-Service-Contract Providers

As defined under the Colorado Student Data Transparency and Security Act, a “school-service-contract provider” is an entity, other than the Colorado Department of Education, a K-12 public education entity or an institution of higher education, that enters into a formal, negotiated contract with CCA or Cherry Creek School District to provide a school service.

 

As defined under the Colorado Student Data Transparency and Security Act, a “school service” is an Internet website, online service, online application or mobile application that: (a) is designed and marketed primarily for use in a preschool, elementary school, or secondary school; (b) is used at the direction of CCA teachers or other employees; and, (c) collects, maintains or uses student personally identifiable information. A “school service” does not include an Internet website, online service, online application or mobile application that is designed and marketed for use by individuals or entities generally, even if it is also marketed to a United States preschool, elementary school or secondary school. 

 

Please go to the Cherry Creek School District Website to access a list of school-service-contract providers.

 

School-Service On-Demand Providers

As defined under the Colorado Student Data Transparency and Security Act, a “school-service on-demand provider” is an entity, other than the Colorado Department of Education or a K-12 public education entity, that provides a school service on occasion to CCA subject to agreement by CCA or one of its employees to standard non-negotiable terms and conditions of service established by the providing entity.

 

As defined under the Colorado Student Data Transparency and Security Act, a “school service” is an Internet website, online service, online application or mobile application that: (a) is designed and marketed primarily for use in a preschool, elementary school or secondary school; (b) is used at the direction of CCA teachers or other employees; and, (c) collects, maintains or uses student personally identifiable information. A “school service” does not include an Internet website, online service, online application or mobile application that is designed and marketed for use by individuals or entities generally, even if it is also marketed to a United States preschool, elementary school or secondary school. 

 

Click here to access a list of school-service on-demand providers that CCA and/or its employees use for school services.