{"id":7056,"date":"2018-06-30T09:18:25","date_gmt":"2018-06-30T13:18:25","guid":{"rendered":"https:\/\/news.elearninginside.com\/?p=7056"},"modified":"2018-06-30T09:18:25","modified_gmt":"2018-06-30T13:18:25","slug":"how-third-parties-can-collect-student-data-without-parental-or-individual-consent","status":"publish","type":"post","link":"https:\/\/news.elearninginside.com\/how-third-parties-can-collect-student-data-without-parental-or-individual-consent\/","title":{"rendered":"How Third Parties Can Collect Student Data Without Parental or Individual Consent"},"content":{"rendered":"

With each new semester and school year, educators are constantly seeking to determine how they can improve their teaching methods and learning outcomes. And in the past few years, that quest has repeatedly taken the same route: digital technology. Pedagogies like personalized or blended learning have shown promising results. Use of tools such as G Suite for Education by Google, AI-powered platforms, or curricula that direct content to students using deep learning algorithms have begun to change they way students learn. But there\u2019s another aspect of these teaching methods that many parents have found difficult to stomach\u2014they collect student data. <\/span><\/p>\n

In order to personalize learning, an application needs to know a thing or two about the learner it\u2019s teaching. That means they\u2019ll need to track students\u2019 grades, keep track of areas in which they study and spend the most amount of time, along with countless other metrics. <\/span><\/p>\n

Many services also collect student data for their own purposes. These companies typically offer their product for free or at a very low cost. The most notorious case would be Google\u2019s G Suite for Education<\/a>, which at one time used student search behavior to target them with ads. The company is no longer carrying on such practices, but they still collect student data for their own purposes.<\/span><\/p>\n

Privacy in the Classroom<\/h1>\n

\u2018But,\u2019 you might ask, \u2018isn\u2019t a student\u2019s data protected under federal law?\u2019<\/span><\/p>\n

The short answer is, \u2018Yes, with a few exceptions.\u2019 Two laws protect student data. The main one is the Family Educational Records Protection Act, or FERPA. This mandates that parents\/legal guardians must give consent for third parties to collect student data. After they turn 18, those students themselves must give consent. The second is the Child Online Privacy Protection Act, or COPPA. This law further protects the privacy of learners aged 12 and younger. <\/span><\/p>\n

\"collect
Ey, Unsplash.<\/figcaption><\/figure>\n

Like much legislation that now controls internet use, FERPA went into effect at a time when digital technology was a military initiative. It was signed into law in 1974 by President Gerald Ford and was last revised in 2012. That revision actually decreased protection of students. It is administered by the Department of Education, which has the power to cut funding if it finds a school in violation.<\/span><\/p>\n

In essence, FERPA raises many instances in which parents must offer signed consent for student education data to exchange hands. But the law also includes several loopholes. The main one, as per 34 CFR 99.21 allows \u201cSchool officials with legitimate educational interest\u201d to give consent in a parent’s place.<\/span><\/p>\n

In other words, a school official can give consent to third parties to collect student data if it is done with legit educational interest at heart. As one might imagine, it isn’t too difficult to establish educational value in a given digital tool or technology.<\/span><\/p>\n

To take the example of Google again, many districts continue to use G Suite for Education without obtaining individual parental consent because a district administrator has already given it in their stead. <\/span><\/p>\n

Young Learners<\/span><\/h1>\n

It might give parents some comfort to know that COPPA isn’t quite as old as FERPA. It was passed by the Clinton administration in 1998 and is administered by the FTC. While the law does dovetail with FERPA in a few areas, there are still situations in which third parties can collect student data without parental consent. Again like FERPA, many of these instances are reasonable. But some open up some leeway.<\/p>\n

For example, parental consent is not required to “provide support for internal operations of your site or service,” according to the FTC<\/a>. Among other reasons, this can include:<\/p>\n