Privacy Policy
Your privacy is very important to us. Accordingly, we have developed this policy to help you understand how we collect, use, communicate, disclose, and safeguard personal information. The following outlines our privacy practices:
- Purpose Identification: Before or at the time of collecting personal information, we will identify the purposes for which the information is being collected.
- Consent and Use: We will collect and use personal information solely with the objective of fulfilling those specified purposes and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
- Data Retention: We will only retain personal information as long as necessary for the fulfillment of those purposes.
- Lawful Collection: We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
- Data Relevance: Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
- Security Safeguards: We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.
- Policy Transparency: We will make readily available to individuals information about our policies and practices relating to the management of personal information.
We are committed to conducting our business in accordance with these principles to ensure that the confidentiality of personal information is protected and maintained.
Student Data Collection
The Cache County School District (CCSD) recognizes its responsibility to protect student privacy and ensure data security. In compliance with Utah’s Student Data Protection Act (SDPA), U.C.A §53E-9-302, CCSD has adopted a Data Governance Plan.
Student Data Collected
Class 1 Data is personally identifiable information (PII) or confidential information that is collected or assigned to students or staff members. This information includes:
- A student or employee ID
- A place and/or date of birth
- Personal address and phone numbers
- Personal email addresses
- Social Security Number
- Medical records
- Bank account information
- Staff or student evaluations
- Private education records such as ESL, 504 or Special Education records.
- System access passwords or file encryption keys
Class 2 Data is private business or educational data that is part of the day to day operations of the school district. This information includes but is not limited to:
- Business records such as contracts, bids, purchase requisitions, purchase orders, invoices, account numbers, budgets, job postings, interview documents, internal policies and procedures, etc.
- Educational records such as attendance rolls, class rosters, student assignments, grades, quizzes, tests, etc.
- Staff or student email or documents stored in student or staff accounts or on student or staff computers.
Class 3 Data is Student Directory Information. This information includes:
- Student first and last name
- Student home address
- Student phone number
- Student ID number
- Student photograph
- Student dates of attendance (years)
- Student grade level
- Student diplomas, honors, awards received
- Student participation in school activities or school sports
- Student weight and height for members of school athletic teams
- Student most recent school attended
Optional student data may include information related to Individual Education Plans or special needs services, for which the district will obtain written consent from parents prior to collection.
Use of Student Data
CCSD uses collected student data to inform educational decisions and improve student outcomes. The district maintains a metadata dictionary that outlines data elements collected and their usage.
Sharing of Student Data
CCSD does not share a student’s personally identifiable information (PII) unless in accordance with the Family Educational Rights and Privacy Act (FERPA) and the Utah Student Data Protection Act. De-identified or aggregate data that cannot be used to identify a particular student may be released without consent.
Protecting Student Data
CCSD maintains an Information Technology Security Plan that is updated at least annually. This program includes security training, risk assessments, security testing, and audits. District systems are regularly updated to prevent unauthorized access. Policies are in place to secure all media containing sensitive or confidential data. In the event of a significant data breach involving PII, the district will notify affected individuals as required by law.
Parental Rights Under FERPA
Parents and eligible students have the right to inspect and review the student's education records within 45 days of a request. They may also request amendments to records they believe are inaccurate or misleading. CCSD has policies in place to protect student privacy as required by both state and federal law.
Notice of Directory Information
CCSD may disclose appropriately designated "directory information" without written parental consent, unless the parent has advised the district to the contrary. The primary purpose of directory information is to allow the district to include this type of information in certain school publications. If parents do not wish this information to be made public, they must notify the district.
For more detailed information, please refer to CCSD's Data Governance Plan and related policies available on our website.
Notification of FERPA Rights
Notification of Rights under FERPA for Elementary and Secondary Schools
The Family Educational Rights and Privacy Act (FERPA) affords parents and students who are 18 years of age or older ("eligible students") certain rights with respect to the student's education records. These rights are:
1. The right to inspect and review the student's education records within 45 days after the day the Cache County School District (“District”) receives a request for access.
Parents or eligible students who wish to inspect their child’s or their education records should submit to the school principal [or appropriate school official] a written request that identifies the records they wish to inspect. The school official will make arrangements for access and notify the parent or eligible student of the time and place where the records may be inspected.
2. The right to request the amendment of the student’s education records that the parent or eligible student believes are inaccurate, misleading, or otherwise in violation of the student’s privacy rights under FERPA.
Parents or eligible students who wish to ask the District to amend their child’s or their education record should write the school principal [or appropriate school official], clearly identify the part of the record they want changed, and specify why it should be changed. If the school decides not to amend the record as requested by the parent or eligible student, the school will notify the parent or eligible student of the decision and of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent or eligible student when notified of the right to a hearing.
3. The right to provide written consent before the school discloses personally identifiable information (PII) from the student's education records, except to the extent that FERPA authorizes disclosure without consent.
One exception, which permits disclosure without consent, is disclosure to school officials with legitimate educational interests. The criteria for determining who constitutes a school official and what constitutes a legitimate educational interest must be set forth in the school’s or school district’s annual notification for FERPA rights. A school official typically includes a person employed by the school or school district as an administrator, supervisor, instructor, or support staff member (including health or medical staff and law enforcement unit personnel) or a person serving on the school board. A school official also may include a volunteer, contractor, or consultant who, while not employed by the school, performs an institutional service or function for which the school would otherwise use its own employees and who is under the direct control of the school with respect to the use and maintenance of PII from education records, such as an attorney, auditor, medical consultant, or therapist; a parent or student volunteering to serve on an official committee, such as a disciplinary or grievance committee; or a parent, student, or other volunteer assisting another school official in performing his or her tasks. A school official typically has a legitimate educational interest if the official needs to review an education record in order to fulfill his or her professional responsibility.
4. The right to file a complaint with the U.S. Department of Education concerning alleged failures by the [School] to comply with the requirements of FERPA. The name and address of the Office that administers FERPA are:
Family Policy Compliance Office
U.S. Department of Education
400 Maryland Avenue, SW
Washington, DC 20202
FERPA permits the disclosure of PII from students’ education records, without consent of the parent or eligible student, if the disclosure meets certain conditions found in § 99.31 of the FERPA regulations. Except for disclosures to school officials, disclosures related to some judicial orders or lawfully issued subpoenas, disclosures of directory information, and disclosures to the parent or eligible student, § 99.32 of the FERPA regulations requires the school to record the disclosure. Parents and eligible students have a right to inspect and review the record of disclosures. A school may disclose PII from the education records of a student without obtaining prior written consent of the parents or the eligible student –
- To other school officials, including teachers, within the educational agency or institution whom the school has determined to have legitimate educational interests. This includes contractors, consultants, volunteers, or other parties to whom the school has outsourced institutional services or functions, provided that the conditions listed in § 99.31(a)(1)(i)(B)(1) - (a)(1)(i)(B)(3) are met. (§ 99.31(a)(1))
- To officials of another school, school system, or institution of postsecondary education where the student seeks or intends to enroll, or where the student is already enrolled if the disclosure is for purposes related to the student’s enrollment or transfer, subject to the requirements of § 99.34. (§ 99.31(a)(2))
- To authorized representatives of the U. S. Comptroller General, the U. S. Attorney General, the U.S. Secretary of Education, or State and local educational authorities, such as the State educational agency (SEA) in the parent or eligible student’s State. Disclosures under this provision may be made, subject to the requirements of § 99.35, in connection with an audit or evaluation of Federal- or State-supported education programs, or for the enforcement of or compliance with Federal legal requirements that relate to those programs. These entities may make further disclosures of PII to outside entities that are designated by them as their authorized representatives to conduct any audit, evaluation, or enforcement or compliance activity on their behalf, if applicable requirements are met. (§§ 99.31(a)(3) and 99.35)
- In connection with financial aid for which the student has applied or which the student has received, if the information is necessary for such purposes as to determine eligibility for the aid, determine the amount of the aid, determine the conditions of the aid, or enforce the terms and conditions of the aid. (§ 99.31(a)(4))
- To State and local officials or authorities to whom information is specifically allowed to be reported or disclosed by a State statute that concerns the juvenile justice system and the system’s ability to effectively serve, prior to adjudication, the student whose records were released, subject to § 99.38. (§ 99.31(a)(5))
- To organizations conducting studies for, or on behalf of, the school, in order to: (a) develop, validate, or administer predictive tests; (b) administer student aid programs; or (c) improve instruction, if applicable requirements are met. (§ 99.31(a)(6))
- To accrediting organizations to carry out their accrediting functions. (§ 99.31(a)(7))
- To parents of an eligible student if the student is a dependent for IRS tax purposes. (§ 99.31(a)(8))
- To comply with a judicial order or lawfully issued subpoena if applicable requirements are met. (§ 99.31(a)(9))
- To appropriate officials in connection with a health or safety emergency, subject to § 99.36. (§ 99.31(a)(10)
- Information the school has designated as “directory information” if applicable requirements under § 99.37 are met. (§ 99.31(a)(11))
- To an agency caseworker or other representative of a State or local child welfare agency or tribal organization who is authorized to access a student’s case plan when such agency or organization is legally responsible, in accordance with State or tribal law, for the care and protection of the student in foster care placement. (20 U.S.C. § 1232g(b)(1)(L))
- To the Secretary of Agriculture or authorized representatives of the Food and Nutrition Service for purposes of conducting program monitoring, evaluations, and performance measurements of programs authorized under the Richard B. Russell National School Lunch Act or the Child Nutrition Act of 1966, under certain conditions. (20 U.S.C. § 1232g(b)(1)(K))