Massachusetts Student Data Privacy Laws Need An Update, Say Legislators, Educators Pushing New BillSeptember 13, 2021
As classrooms evolved from giant humming towers in computer labs to tablets and chromebooks on every desk, most states across the country have updated their privacy laws to strengthen protections for students and educators. In Massachusetts, legislators are urging the passage of a bill that would update the state’s statute on student data privacy in K-12 schools, amending a statute that has gone untouched since 2006.
The current version of the bill, which now sits before a joint committee on education, would specifically limit the ways that operators, or vendors that provide online services to schools, could use, share, sell or rent data about students.
“This helps to build greater trust between schools who want to use this technology and students and parents who need to know that this information is going to be protected,” said Amelia Vance, an attorney with the Future of Privacy Forum, a Washington, D.C. think tank and nonprofit specializing in data privacy.
Vance is one of several speakers scheduled to appear at a virtual briefing on the bill today, hosted by Reps. Kate Lipper-Garabedian and Jeffrey N. Roy.
Vance will appear with Cambridge Public Schools CIO Steve Smith, who also founded the Student Data Privacy Consortium. According to Vance, Smith could be considered part of the reason that Massachusetts has not updated its educational privacy laws, for “what is actually a pretty positive reason,” Vance said.
“Districts really stepped up in Massachusetts,” Vance said. “[Massachusetts] has perhaps the most robust and privacy protective infrastructure, largely built by Steve Smith, whose organization provides essentially a model data use agreement that districts can use with companies.”
Smith’s model created a system where companies have to sign a contract agreeing to restrictions around data sharing, Vance said. Smith did not immediately respond to a request for comment.
“It would make the district’s lives easier if companies were required to sign it,” Vance said. “But these districts have really been leading here in a way that I think has led to action feeling less necessary from the legislature.”
Felicia Vasudevan, an attorney who negotiates data privacy agreements with vendors in states including Massachusetts, says having a law in the books would help bolster the process of securing student data.
“When I’m negotiating these agreements, a lot of times the vendors will push back and will say, ‘where is the statute that supports this?’ And I can point to a statute, but not necessarily for Massachusetts or Rhode Island,” Vasudevan said. “So the bill is important because it really gives school districts a backing for why they’re requesting these data privacy protections.”
Data, as defined in the legislation, includes educational records, schoolwork, personal information including phone numbers and emails, discipline records, criminal records and juvenile dependency records, special education data,…