Maintaining Confidentiaity
The Data for Student Success Dynamic Inquiry tool has aggregate and student level data. The latter is given by special permission and needs to be handled in the strictest of confience. As you work with your districts, it is important to review confidentiality of data rules. To support this conversation, we have provided the following:
- Web resources for security and confidentiality
- Web security best practices
- FERPA/HIPAA Quiz
- FERPA/HIPAA Answers
- FERPA Scenarios and Answers
- Lesson plan - security and confidentiality
- Data Security Section of D4SS Launch - Cadillac PPT
Direction from CEPI
Before district personnel log in to a CEPI application that can provide "drill-down" access to the status of an individual student's eligibility, ISD, LEA and PSA districts should ensure that they have implemented the following recommendations:
- The intent of the confidentiality provisions in the NSLA is to limit the disclosure of a child's eligibility status to those who have a "need to know" for proper administration and enforcement of a Federal education program. As such, CEPI expects schools to establish procedures that limit access to a child's eligibility status to as few individuals as possible.
- Prior to disclosing information on the eligibility of individual students, school officials should enter into a memorandum of understanding or other agreement to which all involved parties (including both school lunch administrators and educational officials) would adhere. This agreement would specify the names of the individuals who would have access to the information, how the information would be used in implementing Title I requirements, and how the information would be protected from unauthorized uses and third-party disclosures, and would include a statement of the penalties for misuse of the information.
See the 2008 USDA Memo that also outlines requriements.

