Home / Guides A-Z
All guides A-Z
Every Privacy Ledger guide, listed alphabetically. Each guide opens with a privacy check: the record, the data, the safeguard, and the first check to make.
Ledger 09 - LMS platforms and learning data LMS Platforms and Student Data: Learning Data, Grades and Analytics A plain-language guide to lms platforms and student data: learning data, grades and analytics: the record, the purpose, the authority and the safeguard. Ledger 09 - LMS platforms and learning data LMS Proctoring Integrations and Privacy LMS Proctoring Integrations and Privacy explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 09 - LMS platforms and learning data LMS Third-Party Tools and LTI Data Flows LMS Third-Party Tools and LTI Data Flows explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 09 - LMS platforms and learning data LMS Vendor Analytics Versus Institutional Analytics LMS Vendor Analytics Versus Institutional Analytics: what it means for a learning record, who may use it, and the check to make before it moves. Ledger 11 - Biometrics and surveillance on campus Location Tracking on Campus Networks Location Tracking on Campus Networks: what it means for a biometric template, who may use it, and the check to make before it moves. Ledger 14 - Security controls for student data Logging and Monitoring Student Data Access Logging and Monitoring Student Data Access explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 03 - Education records and directory information Medical and Counselling Records: The Treatment Exception A plain-language guide to medical and counselling records: the treatment exception: the record, the purpose, the authority and the safeguard. Ledger 13 - Data retention and minimisation Minimisation: Collecting Less From the Start Minimisation: Collecting Less From the Start explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 08 - Cloud systems and student portals Mobile Apps and Student Portal Data Mobile Apps and Student Portal Data: what it means for a student record in the cloud, who may use it, and the check to make before it moves. Ledger 08 - Cloud systems and student portals Multi-Factor Authentication for Student Accounts Multi-Factor Authentication for Student Accounts explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 14 - Security controls for student data Network Segmentation for Student Systems A plain-language guide to network segmentation for student systems: the record, the purpose, the authority and the safeguard. Ledger 17 - State student privacy laws New York Education Law 2-d and Student Data A plain-language guide to new york education law 2-d and student data: the record, the purpose, the authority and the safeguard. Ledger 15 - Breaches and incident response Notifying Students After a Breach Notifying Students After a Breach: what it means for a exposed student record, who may use it, and the check to make before it moves. Ledger 15 - Breaches and incident response Notifying the Department of Education and Regulators Notifying the Department of Education and Regulators explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 17 - State student privacy laws Operating in Several States: The Strictest Rule A plain-language guide to operating in several states: the strictest rule: the record, the purpose, the authority and the safeguard. Ledger 03 - Education records and directory information Opting Out of Directory Information: Process and Timing Opting Out of Directory Information: Process and Timing explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 12 - Student rights: access and correction Parental Access After Rights Transfer Parental Access After Rights Transfer: what it means for an education record, who may use it, and the check to make before it moves. Ledger 14 - Security controls for student data Passwords, Passkeys and Student Accounts Passwords, Passkeys and Student Accounts: what it means for a student record system, who may use it, and the check to make before it moves. Ledger 14 - Security controls for student data Patching and Vulnerability Management for EdTech Patching and Vulnerability Management for EdTech explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 14 - Security controls for student data Phishing and Social Engineering Against Colleges A plain-language guide to phishing and social engineering against colleges: the record, the purpose, the authority and the safeguard. Ledger 03 - Education records and directory information Photographs and Video as Education Records Photographs and Video as Education Records: what it means for an education record, who may use it, and the check to make before it moves. Ledger 16 - Institutional privacy governance Policy Exceptions and Who May Grant Them Policy Exceptions and Who May Grant Them explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 08 - Cloud systems and student portals Portal Downtime and Record Availability A plain-language guide to portal downtime and record availability: the record, the purpose, the authority and the safeguard. Ledger 08 - Cloud systems and student portals Portal Parent and Guardian Access Portal Parent and Guardian Access: what it means for a student record in the cloud, who may use it, and the check to make before it moves. Ledger 15 - Breaches and incident response Post-Breach Review and Control Changes A plain-language guide to post-breach review and control changes: the record, the purpose, the authority and the safeguard. Ledger 05 - PPRA, surveys and marketing PPRA and Course Evaluations PPRA and Course Evaluations explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 05 - PPRA, surveys and marketing PPRA and Health Surveys at Colleges A plain-language guide to ppra and health surveys at colleges: the record, the purpose, the authority and the safeguard. Ledger 05 - PPRA, surveys and marketing PPRA and Marketing Uses of Student Information A plain-language guide to ppra and marketing uses of student information: the record, the purpose, the authority and the safeguard. Ledger 05 - PPRA, surveys and marketing PPRA Complaints and Enforcement Routes PPRA Complaints and Enforcement Routes: what it means for a survey response, who may use it, and the check to make before it moves. Ledger 05 - PPRA, surveys and marketing PPRA Consent for Sensitive Surveys A plain-language guide to ppra consent for sensitive surveys: the record, the purpose, the authority and the safeguard. Ledger 05 - PPRA, surveys and marketing PPRA Notice and Opt-Out for Surveys PPRA Notice and Opt-Out for Surveys: what it means for a survey response, who may use it, and the check to make before it moves. Ledger 05 - PPRA, surveys and marketing PPRA Policies: What Must Be Written Down PPRA Policies: What Must Be Written Down explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 05 - PPRA, surveys and marketing PPRA Protected Topics in Surveys A plain-language guide to ppra protected topics in surveys: the record, the purpose, the authority and the safeguard. Ledger 05 - PPRA, surveys and marketing PPRA, Surveys and Marketing: Sensitive Questions and Student Consent A plain-language guide to ppra, surveys and marketing: sensitive questions and student consent: the record, the purpose, the authority and the safeguard. Ledger 05 - PPRA, surveys and marketing PPRA: Which Institutions and Students It Covers PPRA: Which Institutions and Students It Covers: what it means for a survey response, who may use it, and the check to make before it moves. Ledger 04 - Consent and disclosure exceptions Prior Consent: Scope, Specificity and Withdrawal A plain-language guide to prior consent: scope, specificity and withdrawal: the record, the purpose, the authority and the safeguard. Ledger 20 - Audits, documentation and readiness Privacy Audits, Documentation and Readiness: Proving the Practice Privacy Audits, Documentation and Readiness: Proving the Practice explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 16 - Institutional privacy governance Privacy by Design for New College Systems Privacy by Design for New College Systems: what it means for a institutional data practice, who may use it, and the check to make before it moves. Ledger 16 - Institutional privacy governance Privacy Committees and Shared Governance A plain-language guide to privacy committees and shared governance: the record, the purpose, the authority and the safeguard. Ledger 16 - Institutional privacy governance Privacy Governance and Academic Freedom Privacy Governance and Academic Freedom: what it means for a institutional data practice, who may use it, and the check to make before it moves. Ledger 16 - Institutional privacy governance Privacy Governance During a Merger or System Change Privacy Governance During a Merger or System Change: what it means for a institutional data practice, who may use it, and the check to make before it moves.