1. “Tactical” Student Data Privacy SDPC Progression
EIMAC 2018

2. Misc. “Stuff”
The SDPC:
Was started in 2015 due to numerous stakeholders addressing data privacy “Pain Points”
Is organized as a Special Interest Group (SIG) under the Access 4 Learning Community (a 501c3 Member Tech Standards Organization)
Maintains its own governance, oversight and resource support
Has schools, districts, regional and state education agencies, other professional organizations and marketplace providers as members
Is supported through membership dues
A4L’s focus is on the technical aspects of data management, movement and usage via collaboratively built open technical standards (SIF Specifications)

3. “Big Picture” Strategy

4. SDPC Goals
Establish a community of stakeholders who have various needs addressed through policy, technology and/or effective practice sharing around effective privacy management,
Identify projects that have on-the-ground and real-world impact on student data privacy enabling schools, districts, state and vendors find resources, adapt them to their unique context and implement needed protections,
Development of tools and resources to address operational issues not currently being addressed,
Leverage partnership organizations working in the privacy space to have their good work utilized and no reinvention of existing work,
Development of a clearinghouse of student data privacy operational issues and resources to support schools, districts, states and vendors in managing those issues – no matter where the resources originate.
Avoiding “reinventing the wheel” by offering other organizations join the Community as partners!

5. SDPC Tactical Privacy Projects
Project 1: Privacy Contract Framework
The Privacy Contract Framework project is focused on the development a framework for identifying solutions that have on-the-ground and real-world impact on student data privacy enabling schools, districts, state and vendors find resources, adapt them to their unique context and implement needed protections. Application Profiles will be developed to support “apples to apples” comparisons.
Developing common contract wording for fewer “one-off’s” contract with vendors inside a school and even state ecosystem – a win for end users AND vendors.

6. Alliances, Alliances, …..
SDPC State/Territory Alliances (Green) and in Process (Yellow)
Currently 14 million Students Impacted by over 900 Applications!

7. Alliances, Alliances, ….. Alliance Formation Models:
Top Down: The State agency leading the charge to develop and grow the Alliance
Bottom Up: A LEA takes the lead to develop and grow the Alliance
Middle Driven: A regional service agency, professional association, or user group takes the lead to develop and grow the Alliance
- CoSN, ISTE, SETDA, affiliates / Regional Service Agencies / Etc.
* All three models have examples of SEAs paying for Alliance Membership as a “value-add” to LEAs.

8. Alliances, Alliances, ….. Alliance Roles:
Participate in the SDPC and interact with other Alliance members and SDPC Projects
Convene stakeholders in their state to identify pain points and gauge the interest in developing a “common contract framework” and tools use as 16 other states have done to date.
Develop contract wording that could be used by all districts with their vendors and provide transparent communications to parents and community members on application usage.
Advocate for student data privacy and locally support the ongoing needs of the Alliance including bringing possible projects to the larger SDPC Consortium for review and vetting by other Alliances.

9. “SDPC App”

10. Privacy Contract Wording

11. SDPC Tool Data Used Contract PDF
Besides a “Contract Builder Tool” allowing you to “steal from the best privacy contract clauses from numerous sources including the US Dept of Education, the SDPC Application Registry Tool allows uses to manage and communicate externally their various applications and contract language. It allows visitors the ability to search for application and contract wording by application type, state, LEA, even country!
Contract PDF

13. SDPC Tactical Privacy Projects
Project 1: Privacy Contract Framework
The Privacy Contract Framework project is focused on the development a framework for identifying solutions that have on-the-ground and real-world impact on student data privacy enabling schools, districts, state and vendors find resources, adapt them to their unique context and implement needed protections. Application Profiles will be developed to support “apples to apples” comparisons.
Project 2: Digital Governance Tool
The Digital Tools Governance project centers around developing a comprehensive framework for aligning a school system’s policy landscape, strategic programming, tactical processes, and accountability mechanisms to support the system’s vision of how its digital tool ecosystem will advance its overall mission and goals while minimizing its risks of data privacy and security incidents.

14. Digital Tool Governance
Framework for Transformative Digital Governance
Know your goal before you begin…
Ensure Accountability Mechanisms and Metrics are Working
Monitor Metrics and Provide Feedback
Adapt and Rework as Necessary
Digital Tool Governance
Craft a Vision
Assess the Terrain
Develop the Plan
Mobilize and Deploy
Monitor and Adapt
Tone at the Top?
Policies in Place?
Stakeholders?
Risk and Liabilities?
Ground View?
Blind Spots?
New Policies & Procedures
Implementation Strategy
Communications Plan & Documents
Accountability Mechanisms & Metrics
Peoples’ Roles & Responsibilities
Resources Needed
Create Cross-functional Teams
Communicate Goals, Plans, & Expectations
Provide Training & Resources
Fully Engage & Walk the Walk
Celebrate Accomplishments
The Digital Governance allows users to address their various privacy use cases by providing them guidance in addressing and implementing solutions or policies – no matter what they might be! The tool will allow members to gather and share use case solutions they create using the Digital Governance framework.

15. Example Use Case: District Data Privacy and Security Professional Learning
An example of a use case developed via the Digital Governance Framework

16. SDPC Tactical Privacy Projects
Project 3: Privacy Connect
- Teacher A finds the greatest application in the world to teach his/her subject matter to students. What does it take from him/her asking for the application to be used with his/her students to having students using the application?”. This may include various owners (legal, technical, fiscal, etc.), critical areas of concern (privacy, security, parental notice, etc.) and impact (academic alignment, usage, other options, etc.). The “Connect” project’s focus is to see how many of these steps can be standardized, automated, or establish effective practices so we all are not starting from scratch each time. The goal is to streamline application selection, vetting, on boarding (sharing properly protected data elements), and final implementation with marketplace norms.
Perhaps the Holy Grail for CIOs – a standardized and simplified way to bring any application safely into their ecosystem with quality control measures embedded. Vendors love the concept because understanding the expectations of customers is their major pain point.

17. Project 3: SDPC Tactical Privacy “Connect”
Goal: Support data stewards and their institutions to address student data privacy from application identification to application utilization.
Application Vetting (Digital Tools Governance/SDPC App)
Privacy Contract Wording (Contract Builder)
Technical Requirements (Technical Standards)
Workflow Automation (SDPC Application)
Automate Data Exchanges via
Privacy Requirements (TBD)
Stakeholder Communications at Each Step
The Approved next SDPC Project. In the real world see it as: ‘Teacher A’ finds the greatest application in the world to teach his/her subject matter to students. What does it take from him/her requesting the application to be used with students, to having students using it?”
The
“Last Mile”

18. The Current World Districts Integrators Marketplace Products
The current environment. Thousands of apps from thousands of schools connecting in a very haphazard and mostly “one off” manner. About 25% of Districts use integrators.
Marketplace Products

19. SDPC Value Add 1 Districts Integrators Integrators
Vetting & Contracting Framework
Vetting & Contracting Framework
Districts
Integrators
Integrators
The SDPC Project work has helped streamlined the vetting and contract aspects of connections but not the connections themselves.
Marketplace Products

20. SDPC Value Add 2: Connected Privacy
Districts
Vetting & Contracting Framework
“Secure/Quick Connections”
Privacy Standards
Certification
Integrators
Integrators
The next project of the SDPC – Connect – is going to enable those connections to take place in a standardized manner streamlining the work of schools, integrators and marketplace providers. Added here are the multiple integrator to integrator interactions districts sometimes use.
Marketplace Products

21. In a Perfect World…..

22. “Perfect World” Pieces

23. “Tactical Privacy” Project List
By supporting an Alliance in your state you are making all the resources of all ongoing projects and tool development available to ALL DISTRICTS in your state.
Privacy Contract Framework: The first SDPC project, this work leverages the Massachusetts Student Privacy Alliance (MSPA) framework for contract sharing across 60 districts. With clear benefits to agencies as well as vendors through optimizing the legal processes of jurisdictional provision coverage, this project exponentially expands the MSPA work across states and provides technical tools to streamline contract preparation/management
Digital Governance Tool: This project centers around developing a comprehensive framework for aligning a school system’s policy landscape, strategic programing, tactical processes, and accountability mechanisms to support the system’s vision of how its digital tool ecosystem will advance its overall mission and goals while minimizing its risks of data privacy and security incidents.
Privacy Connects: Teacher A finds the greatest application in the world to teach his/her subject matter to students. What does it take from him/her asking for the application to be used with his/her students to having students using the application?”. This may include various owners (legal, technical, fiscal, etc.), critical areas of concern (privacy, security, parental notice, etc.) and impact (academic alignment, usage, other options, etc.). The “Connect” project's focus is to see how many of these steps can be standardized, automated, or establish effective practices so we all are not starting from scratch each time. The goal is to streamline application selection, vetting, on boarding (sharing properly protected data elements), and final implementation with marketplace norms.

24. Find Out More https://privacy.a4l.org Larry L Fruth II, Ph.D.
Steve Smith