Home / Guides A-Z
All guides A-Z
Every Privacy Ledger guide, listed alphabetically. Each guide opens with a privacy check: the record, the data, the safeguard, and the first check to make.
Ledger 07 - Vendors and contracts Vendor AI Features and Student Data Leakage Vendor AI Features and Student Data Leakage: what it means for a student data held by a vendor, who may use it, and the check to make before it moves. Ledger 07 - Vendors and contracts Vendor Audits and the Right to Inspect Vendor Audits and the Right to Inspect: what it means for a student data held by a vendor, who may use it, and the check to make before it moves. Ledger 20 - Audits, documentation and readiness Vendor Audits for Student Data Vendor Audits for Student Data: what it means for a privacy audit record, who may use it, and the check to make before it moves. Ledger 07 - Vendors and contracts Vendor Breach Notification Duties in Contract A plain-language guide to vendor breach notification duties in contract: the record, the purpose, the authority and the safeguard. Ledger 15 - Breaches and incident response Vendor Breaches Affecting Student Data Vendor Breaches Affecting Student Data: what it means for a exposed student record, who may use it, and the check to make before it moves. Ledger 07 - Vendors and contracts Vendor Contracts: The Clauses That Matter Most Vendor Contracts: The Clauses That Matter Most: what it means for a student data held by a vendor, who may use it, and the check to make before it moves. Ledger 07 - Vendors and contracts Vendor Data Hosting: Location and Jurisdiction A plain-language guide to vendor data hosting: location and jurisdiction: the record, the purpose, the authority and the safeguard. Ledger 07 - Vendors and contracts Vendor Data Use Bans: Selling, Advertising and Profiling Vendor Data Use Bans: Selling, Advertising and Profiling explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 07 - Vendors and contracts Vendor Incident Playbooks, Agreed in Advance Vendor Incident Playbooks, Agreed in Advance explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 07 - Vendors and contracts Vendor Insurance and Liability for Data Loss Vendor Insurance and Liability for Data Loss explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 07 - Vendors and contracts Vendor Mergers, Acquisitions and Student Data Vendor Mergers, Acquisitions and Student Data: what it means for a student data held by a vendor, who may use it, and the check to make before it moves. Ledger 07 - Vendors and contracts Vendor Return and Deletion at Contract End Vendor Return and Deletion at Contract End: what it means for a student data held by a vendor, who may use it, and the check to make before it moves. Ledger 07 - Vendors and contracts Vendor Risk: Mapping Every Vendor That Touches Student Data Vendor Risk: Mapping Every Vendor That Touches Student Data explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 07 - Vendors and contracts Vendor Security Assessments Before Signing A plain-language guide to vendor security assessments before signing: the record, the purpose, the authority and the safeguard. Ledger 07 - Vendors and contracts Vendor Subprocessors and the Chain Problem Vendor Subprocessors and the Chain Problem explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 07 - Vendors and contracts Vendor Support Access to Live Student Records A plain-language guide to vendor support access to live student records: the record, the purpose, the authority and the safeguard. Ledger 04 - Consent and disclosure exceptions Verbal Disclosures and the Paper Trail Problem A plain-language guide to verbal disclosures and the paper trail problem: the record, the purpose, the authority and the safeguard. Ledger 06 - COPPA and younger students in EdTech Verifiable Parental Consent Under COPPA A plain-language guide to verifiable parental consent under coppa: the record, the purpose, the authority and the safeguard. Ledger 11 - Biometrics and surveillance on campus Voice Biometrics in Proctoring and Support A plain-language guide to voice biometrics in proctoring and support: the record, the purpose, the authority and the safeguard. Ledger 01 - Student privacy foundations What Counts as Student Data at a College What Counts as Student Data at a College explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 12 - Student rights: access and correction When a College Refuses an Amendment A plain-language guide to when a college refuses an amendment: the record, the purpose, the authority and the safeguard. Ledger 03 - Education records and directory information When a Record Stops Being an Education Record When a Record Stops Being an Education Record: what it means for an education record, who may use it, and the check to make before it moves. Ledger 06 - COPPA and younger students in EdTech When COPPA Stops Applying at 13 A plain-language guide to when coppa stops applying at 13: the record, the purpose, the authority and the safeguard. Ledger 16 - Institutional privacy governance When Governance Fails: Lessons From Public Cases When Governance Fails: Lessons From Public Cases explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 04 - Consent and disclosure exceptions When No Exception Fits: Stop and Ask When No Exception Fits: Stop and Ask explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 14 - Security controls for student data When Security Controls and Privacy Rules Conflict When Security Controls and Privacy Rules Conflict explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 17 - State student privacy laws When State and Federal Rules Conflict A plain-language guide to when state and federal rules conflict: the record, the purpose, the authority and the safeguard. Ledger 01 - Student privacy foundations When Student Data Leaves the Campus A plain-language guide to when student data leaves the campus: the record, the purpose, the authority and the safeguard. Ledger 01 - Student privacy foundations Who Holds a Student Record, and Who Decides Who Holds a Student Record, and Who Decides: what it means for an education record, who may use it, and the check to make before it moves. Ledger 11 - Biometrics and surveillance on campus Wi-Fi and Bluetooth Tracking of Students Wi-Fi and Bluetooth Tracking of Students explained for colleges: the rule, the exceptions, and the record an institution should keep. Ledger 16 - Institutional privacy governance Writing a Student Privacy Policy That Staff Read A plain-language guide to writing a student privacy policy that staff read: the record, the purpose, the authority and the safeguard. Ledger 04 - Consent and disclosure exceptions Written Consent Under FERPA: What Counts Written Consent Under FERPA: What Counts: what it means for an education record, who may use it, and the check to make before it moves.