Skip To Main Content

Student Data Privacy & Security

Students in the Norfolk Public Schools use a variety of online tools to support teaching and learning. Many of these educational tools collect limited Personally Identifiable Information (PII) in order to allow students to log in, save progress, and access personalized learning experiences. To protect student information, a Data Privacy Agreement (DPA) is required for each software title or vendor used in the district.

Norfolk Public Schools is a member of the TEC Student Data Privacy Alliance (SDPA), which works in collaboration with the Student Data Privacy Consortium (SDPC) to manage and procure these agreements. The TEC SDPA provides standardized Massachusetts Student Data Privacy Agreements (DPA) that clearly outline vendor responsibilities and legal requirements to safeguard student data in compliance with all applicable federal and state laws, including FERPA, PPRA, and COPPA. Click here to see the NPS SDPA Resource list

All faculty and staff are responsible for ensuring that any digital tools or applications used with students have a signed DPA on file with the Norfolk Public Schools Technology Department. Before using a new software title, staff must submit a request using the appropriate Technology Vetting Form for their school. This process ensures that each resource is reviewed for instructional value, accessibility, and compliance with student data privacy requirements before being used with students: 

Freeman-Kennedy School: Submit a Vetting Request

H. Olive Day School: Submit a Vetting Request

FERPA/COPPA/CIPA Protections

FERPA - The Family Educational Rights and Privacy Act  provides certain rights for parents regarding their children’s education records. This guide provides general information on a parent’s rights under FERPA.

COPPA - Children's Online Privacy Protection Act of 1998,  a U.S. federal law requiring operators of websites and online services to obtain parental consent before collecting personal information from children under 13. Enforced by the FTC, it aims to protect children's privacy online

CIPA - The Children's Internet Protection Act was enacted by Congress in 2000 to address concerns about children's access to obscene or harmful content over the Internet. CIPA imposes certain requirements on schools or libraries that receive discounts for Internet access or internal connections through the E-rate program – a program that makes certain communications services and products more affordable for eligible schools and libraries. In early 2001, the FCC issued rules implementing CIPA and provided updates to those rules in 2011.