Ed Law 2-d Documents
Education Law §2-d is a New York State law designed to protect the privacy and security of student data and certain teacher and principal information. Enacted in 2014 and strengthened by the adoption of Part 121 of the Commissioner’s Regulations in 2020, the law sets clear expectations for how educational agencies and their third-party contractors must handle personally identifiable information (PII).
Key Provisions:
- Data Protection Obligations: Schools and BOCES must ensure that any PII they collect is safeguarded through robust administrative, technical, and physical security measures.
- Third-Party Contracts: Vendors handling PII must sign a Data Protection Agreement (DPA) that aligns with §2-d requirements, including data minimization, encryption, and breach notification protocols.
- Parent and Student Rights: Families have the right to inspect and review their child’s education records and to file complaints about possible breaches of data privacy.
- Breach Notification: In the event of unauthorized data disclosure, districts must notify affected parties within 60 days and follow specific communication protocols
This law goes beyond federal FERPA protections, reflecting New York’s commitment to safeguarding educational data in an increasingly digital world