COPPA Notices for EdTech Used by Younger Students

A practical way to approach coppa notifications for edtech used by younger students is to ask what a student would expect if they saw the sharing described in plain language. Where the sharing matches that expectation and the authority supports it, it can proceed with a log entry; where it surprises, it needs consent, an identified exemption or a fresh determination, not a quiet assumption.

Cross-office sharing inside one institution still needs authority, since internal does not mean unrestricted.

A disclosure log is not bureaucracy: it is the record that lets a student, an auditor or a regulator reconstruct what happened.

The safest test for any proposed disclosing is to write it down in one sentence naming the file, the recipient, the objective and the authority, and then to read that sentence back critically.

Device security for staff laptops matters since a stolen laptop may hold more student files than a filing cabinet ever did.

Disability documentation is among the most personal information a college retains, and it ought to never travel with general academic files by default.

Disciplinary releases to victims and others have specific limits, and the outcome that might be shared depends on the offence and the receiver.

Law enforcement files created by a site police unit for a law enforcement purpose are treated separately from education files, with their own limits.

Platforms that feed directory information to outside directories need an opt-out verify built into the feed, not added as a manual afterthought.

Health and counseling systems ought to be segregated from broad student systems, with access limited to the employees who provide the care.

Directory information is a defined subset that a college might designate and publish, and the designation must be published before it is relied on.

Keep inventories current, and treat an inventory that is a year out of date as no inventory at all.

Locate each copy before deciding, including the vendor copy, the backup copy and the copy in the shared drive.

Contain removal verification in vendor contracts, with a method and a timetable, because a promised removal without verification shall be doubted.

Separate duties so that the person who approves a disclosure is not the solely person who may see that it happened.

Retain applicant files on a specified schedule, and delete them when that schedule expires, rather than retaining them indefinitely.

Audit surveillance systems for access, storage and disclosure, since cameras generate files continuously, even when nobody watches.

Use external auditors where independence matters, and provide them access to the systems they need to test, not solely to policy documents.

Scrutinise tracking in education applications for younger students, because behavioral information grows quietly over a school year.

In that illustration the instructor shares the summary, the colleague's advice improves, and no record leaves the instructor's department.

In that illustration the platform shall retain grades, attendance and advising notes, but the university excludes personal comments from the export and keeps them in the existing platform.

In that illustration the removal is logged, and the department may demonstrate a reviewer that the schedule was followed.

Consider an employer who requests an university to confirm a graduate's degree and is given solely the directory facts the university has designated, not the transcript.

Consider a campus card platform whose transaction logs were kept indefinitely, and a review that sets a storage period tied to the objectives of those logs.

Redacting access responses without explaining the redactions is a mistake, because an unexplained gap teaches a student that records are edited at shall.

A reader who applies that structure, and who escalates the cases it cannot settle, shall make better determinations than a reader who memorises any single rule in this ledger.

Mixing health or counselling records into broad student platforms is a mistake that is hard to undo once the data has spread.

Redisclosing a file received under an exemption, without verifying whether the second sharing is covered, is an error that spreads the original disclosure.

Disclosing to a parent on the basis of family relationship alone, without establishing dependency, is an error that recurs every enrolment season.