The School District of Indian River County uses Board Policy 7540.02 - WEB CONTENT, SERVICES, AND APPS to guide and instruct the use of online educational services. The content, apps and services must comply with applicable State and Federal laws (e.g., copyright laws, Children's Internet Protection Act (CIPA), Section 504 of the Rehabilitation Act of 1973 (Section 504), Americans with Disabilities Act (ADA), and Children's Online Privacy Protection Act (COPPA)), and reflect the professional image/brand of the District, its employees, and students. In addition, most companies that we work with have signed the Student Data Privacy Pledge and/or are iKeepSafe.org certified.

The School District of Indian River County utilitzes ClassLink and Clever for student Single Sign-On rostering into online educational services. ClassLink and Clever are both CIPA, COPPA, and FERPA Compliant.

Information regarding Terms of Service and Student Data Privacy Agreements can be found on the ClassLink Public Portal.

SDIRC and the Instructional Technology Department are committed to Student Data Privacy. The following policies and procedures are in place to protect student data:

- All online educational services utilized by SDIRC are vetted for the following requirements:
  - CIPA Compliance
  - FERPA Compliance
  - COPPA Compliance
  - Board Policy Compliance
- All online educational services utilized by SDIRC, once vetted, enter into a Service Agreement that includes a clear and outlined Data Sharing Agreement that is vetted and approved by SDIRC legal council.
- A teacher who elects to supplement and enhance student learning through the use of apps and/or services is responsible for verifying/certifying to their administrator that the app and/or service has a FERPA‑compliant privacy policy, and it complies with all requirements of the Children’s Online Privacy Protection Act (COPPA) and the Children’s Internet Protection Act (CIPA). The following form has been created for teachers to share with parents any educational online services that require notification and consent for students under the age of 13. Parent App Permission Slip 2023.pdf
- All online educational services provided or suggested by SDIRC staff and departments are resources identified as a tool or digital strategy. Curriculum content and prefabricated lessons embedded and available via online tools are not considered District-approved curriculum and require approval from the school's Principal prior to use during instruction.
- Websites, Chromebook Apps, Software Downloads, Extensions, iPad Apps, and STEAM Products are all carefully reviewed and vetted by multiple departments (IT, C&I, ESE, etc) and then posted on the Approved Software List. Only applications listed on the Approved Software List can be installed on district devices. iPad apps are installed on general, school-use devices and/or employee devices and do not require student accounts. Therefore, all iPad apps do not have access to student's personally identifiable information.
- Any parent that is uncomfortable with the data sharing agreement with any of our online educational services can request, in writing to their school Principal, to opt out of any service. Within 24 hours, the School District of Indian River County will work with the company to immediately remove and delete student data and will inform the Principal when confirmation of data deletion has occurred.
- The Instructional Technology Department utilizes the resources from Student Privacy Compass to educate and train teachers and staff on student data privacy laws and compliance.

United States – Children’s Internet Protection Act (CIPA)

‍The Children’s Internet Protection Act (CIPA) requires schools and libraries receiving certain e-Rate benefits from the Federal Communications Commission (FCC) to adhere to policies that provide safe internet experiences for minors. These include policies related to:

Preventing access by minors to inappropriate matter on the Internet;
The safety and security of minors when using electronic mail, chat rooms and other forms of direct electronic communications;
Unauthorized access, including so-called “hacking,” and other unlawful activities by minors online;
Unauthorized disclosure, use, and dissemination of personal information regarding minors; and
Measures restricting minors’ access to materials harmful to them.

United States – Children’s Online Privacy Protection Act (COPPA)

The Children’s Online Privacy Protection Act of 1998 (COPPA) is a federal law designed to help parents remain in control of what personal information websites and other online services can collect from their young children. COPPA is administered by the Federal Trade Commission (FTC). It applies to operators of websites, apps, or other online services that collect, use, or disclose personal information from children under the age of 13, and to operators of general audience websites, apps, or online services that have actual knowledge that they are collecting, using, or disclosing personal information from children under 13.

United States – Family Educational Rights and Privacy Act (FERPA)

The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education. FERPA sets forth protocols for ensuring privacy and security of personally identifiable information of students. All SDIRC online service providers adhere to the data protection protocols set forth in FERPA.

Florida – Fla. Stat. § 1002.22, Education records and reports of K-12 students; rights of parents and students; notification; penalty (§1002.22); and Fla. Stat. § 1002.222, Limitations on collection of information and disclosure of confidential and exempt student records (§1002.222)

‍ClassLink is compliant with the regulations put forth by Fla. Stat. § 1002.22, Education records and reports of K-12 students; rights of parents and students; notification; penalty (§1002.22); and Fla. Stat. § 1002.222, Limitations on collection of information and disclosure of confidential and exempt student records (§1002.222).

In addition to the above guiding principles on personal data:

Biometric data of students, parents, and siblings: ClassLink does not collect biometric information as defined statute for students, parents, and siblings in Florida.
Location: ClassLink contracts with educational agencies in Florida are governed by and construed in accordance with the laws of the State of Florida. Additionally, educational agencies in the United States are serviced by ClassLink servers and database infrastructure that are based in the United States.

ClassLink and Clever are iKeepSafe Certified

The iKeepSafe COPPA Safe Harbor Certification program ensures that practices surrounding collection, use, maintenance and disclosure of personal information from children under the age of 13 are consistent with principles and requirements of the Children’s Online Privacy Protection Act (COPPA). Companies that comply with the guidelines are awarded a badge, making it easy for parents and schools to identify products that are compliant with COPPA.

SDIRC utilized applications that are iKeepSafe Certified:

Artsonia
Book Creator
Buncee
Canva
ClassFlow
ClassLink
Clever
EdPuzzle
Gizmos
Reflex
Science4Us
GoGuardian
Kuta Works
Cyber.org
Prodigy
Remind
Savvas Realize
Screencastify
StoryLabs
TalkingPoints
TCi
Wakelet