What are the best practices for student data privacy when using online tools?
Know the laws and policies
In the U.S., FERPA protects education records, and COPPA requires parental consent for children under 13. Many states have additional student privacy laws.
Check your school or district's acceptable use policy and approved tool list. If a tool isn't approved, ask before using it with students.
- FERPA – applies to schools receiving federal funds.
- COPPA – applies to online services directed to children under 13.
- State laws – some states require data privacy agreements.
- District policy – may require a signed contract or data privacy agreement.
Evaluate tools before use
Read the privacy policy and terms of service. Look for what data is collected, how it's used, and whether it's shared with third parties.
Prefer tools that allow you to create accounts without personal student information, or that offer school-specific agreements. Avoid tools that require students to provide unnecessary personal details.
- Does the tool collect only what's needed for learning?
- Can you delete student data after the class ends?
- Does it sell data or use it for advertising?
- Is there a signed data privacy agreement available?
Classroom practices
Use pseudonyms or student IDs instead of full names when possible. Teach students not to share personal information in public forums or chats.
Get parental consent when required, and keep records. Review your tool list each year and remove tools that are no longer needed.
- Create a class account instead of individual student accounts when possible.
- Turn off public sharing and chat features unless needed.
- Regularly review and delete old student accounts.
- Train students on what data is and why it matters.
Common mistakes
- Assuming that because a tool is free for education, it automatically protects student data.
- Using a tool without checking if it complies with COPPA or FERPA.
- Sharing student work publicly without parental consent.