Determinations of the Chief Privacy Officer
On this page, you will find links to Determinations of the Chief Privacy Officer from December 1, 2021 through current Determinations.
|
Educational Agency Name |
Determination Date |
Issue(s) |
Link to Determination |
|---|---|---|---|
| Batavia City School District | 08/16/2023 | Parent complained that a District employee Improperly disclosed student PII to the student’s emergency contact who is not the student’s parent or legal guardian. | Batavia City SD 08/16/2023 Determination |
| Bay Shore Union Free School District | 07/05/2022 |
Parent complained that their child’s PII was released by a teacher posting information on an educational website and on Twitter. |
Bay Shore UFSD 07/05/22 Determination |
| Behavioral Strategies and Blue Sea | 07/13/2023 |
Two school districts filed incident reports indicating that a former employee of Behavioral Strategies had inappropriately accessed student data through her Behavioral Strategies account after she left her employment with Behavioral Strategies. |
Behavioral Strategies and Blue Sea 07/13/2023 Determination |
| Bradford Central School District | 05/17/2023 |
Parent complained that a District employee accessed their child’s education record in order to enable a former employee of the district to mail personal correspondence to the parent’s home. |
Bradford CSD 05/17/2023 Determination |
| Brighton Central School District | 11/07/2023 |
Parent complained that they received a child’s 504 plan in the mail, who is not the complainant’s child and that the school district was unresponsive when parent reached out. |
Brighton CSD 11/07/2023 Determination |
| Cairo-Durham Central School District | 12/01/2023 |
Parent complained that although they “opted-out” of posting their children’s pictures, the school district published a picture of the freshman year class which included the parent’s child. |
Cairo-Durham CSD 12/01/2023 Determination |
| Cohoes City School District | 12/01/2023 | Complainant alleged that The District failed to provide her with access to the Student’s educational and health records and that the District disclosed PII concerning the student to a third-party entity without consent. | Cohoes City SD 07/13/2023 Determination |
| Cold Spring Harbor Central School District | 08/04/2023 | Parent complained that the Superintendent unnecessarily included irrelevant student PII in an email to the parent which copied all members of the school board. | Cold Spring Harbor CSD 08/04/2023 Determination |
| Dr. Richard Izquierdo Health & Science Charter School | 03/28/2023 | Complainant alleged that former staff members of the Dr. Richard Izquierdo Health & Science Charter School obtained student Personally Identifiable Information (“PII”) before leaving and used that information to recruit students for their new employer, the Charter High School for Law and Social Justice. | Dr. Richard Izquierdo Health & Science Charter School and Charter High School for Law and Social Justice 03/28/2023 Determination |
| Elmira City School District | 08/24/2023 | Parent complained that the District without obtaining permission, provided the cell phone numbers for families whose children had been identified as potential participants in the My Brothers Keeper (MBK) program to the program coordinator. The program coordinator used the phone numbers to create a group text to communicate with the families. | Elmira City SD 08/24/2023 Determination |
| Elmira City School District | 02/27/2024 | Parent complained that in response to a request for her child’s test scores she received the test scores and other reports of all the students in her child’s class. In another incident, parent complains that the school shared her child’s information with individuals who are not school officials. | Elmira City SD 02/27/2024 Determination |
| Fairport Central School District | 11/30/2021 | Complainant alleged that the school district improperly displayed students’ names and pronouns, which might indicate a student’s gender identity, on a school hallway without first obtaining consent. | Fairport CSD 11/30/2021 Determination |
| Grand Island Central School District | 03/17/2023 |
Parent complained, after receiving a text message about their child’s vaccination status, that the Infinite Campus data protection agreement did not comply with Education Law §2-d. |
Grand Island CSD 03/17/2023 Determination |
| Jericho Union Free School District | 04/29/2022 | Whether a school district, upon learning of an unauthorized disclosure of student personally identifiable information, provided adequate notification of the unauthorized disclosure to the parents of affected students. | Jericho UFSD 04/29/2022 Determination |
| Lackawanna City School District | 04/07/2023 | Parent complained that reports made via the District’s Dignity for All Students Act (“DASA”) reporting form were accessible to all district students to read. | Lackawanna City SD 04/07/2023 Determination |
| North Shore Central School District | 12/01/2021 | Complainant alleged that the school district disclosed student and family PII — specifically, names, addresses, and phone numbers—without consent, to the president of the teacher’s union. | North Shore CSD 12/01/2021 Determination |
| Saugerties Central School District | 08/16/2023 | Parent complained that a District employee inappropriately shared student PII (after school pick-up) with the parent’s former spouse. | Saugerties CSD 08/16/2023 Determination |
| Shenendehowa Central School District | 07/28/2022 |
Parent complained that the school district improperly allowed another parent to view video of an incident that involved 5 students, including complainant’s child. |
Shenendehowa CSD 07/28/2022 Determination |
| Skaneateles Central School District | 11/30/2021 |
Parent complained that the school district failed to provide the Parent with access to student’s education records; the school district disclosed PII to third-party service providers and the school district disclosed student PII, without consent to employees who did not have a reason to know the PII. |
Skaneateles CSD 11/30/2021 Determination |
| Success Academy Charter School Rockaway Park Middle School | 12/21/2023 |
Parent complained that the school improperly disclosed her child’s personally identifiable information when it posted student grade point averages (GPAs) in a manner visible to everyone entering her child’s classroom. |
Success Academy Charter School Rockaway Park Middle School 12/21/2023 Determination |
| Success Academy Charter School Rockaway Park Middle School | 03/08/2024 |
At the request of Success Academy, the Privacy Office reviewed its December 21, 2023 determination and issued a revised determination addressing the educational agency’s parent consent form. |
Success Academy Charter School Rockaway Park Middle School Revised Determination 03/08/2024 |
| Williamson Central School District | 07/13/2022 |
Parent complained that their child’s PII was implicitly disclosed when select students were rewarded with ice cream for exhibiting growth in a reading assessment and other students were not. |
Williamson CSD 07/13/2022 Determination |
| Wappingers Central School District | 12/13/2023 |
Parent complained that the school district improperly disclosed her child’s personally identifiable information when the transportation department was notified that the student did not need to be picked up for several days because the student was suspended due to a disciplinary matter. |
Wappingers CSD 12/13/2023 Determination |