My Review of Proposed Privacy Legislation for Louisiana

My apologies for not getting to this topic (and many others I’ve neglected) sooner. I may have finally bitten off more than I can effectively chew in things I’ve agreed to do. I have the best of intentions, I promise you, but sometimes my eagerness to help everyone runs smack into the limiting reality of my available free time.

While I haven’t been writing as much I have been working with different groups and gathering their input, and researching various stories, laws, and debunking other’s false research and statements. Consider that statement the segue into today’s post.

The Louisiana House Education Committee will be hearing statements and reviewing bills on student privacy, Wednesday March 19th starting at 9am. From what I’ve been hearing this should be a packed house in House, with many parents and parent’s groups eager to attend and be heard.

My good friend and fellow education blogger, Michael Deshotels, has been keeping track of the various education bills and posting them to his website. His last update was on March 10th. A link to that posting follows:

http://louisianaeducator.blogspot.com/2014/03/report-on-legislature-2.html

A number of parent’s groups and bloggers I work with have been very supportive of Schroeder’s privacy bill, HB 946. To my eye the first 5 bills Mike lists are very similar in intent and some of the verbiage. . .

HB 555 by Henry, HB 560 by Ivey, HB 946 by Schroeder, HB 384 by Cromer, and SB 455 by G. Smith prohibits certain student data collection and sharing

. . . with a few caveats. The bill proposed by Representative Schroeder defines penalties for violating the statute and is more emphatic about not collecting, storing, or using Social Security Numbers and prohibits anyone but local school districts from possessing student level data. Schroeder’s bill also more clearly defines what should not be collected. Some or all of the other bills lack these details.

HB 946 is appealing for its relative simplicity and clarity. However there are definitely some tweaks that I would make that I think most privacy advocates would endorse:

  • I did not see an exception for certain groups that may require data that will benefit children and parents (i.e. sports/athletic organizations that may require grades, enrollment, grade level and so forth for participation in football or other competitive sports or sharing of data with local medical institutions for care of the student.)
  • Many parents transfer to non-public schools and out of state, so public schools will need to have the defined ability to transfer records on those instances.
  • I did not see a provision for retention or destruction of certain types of records. (I.e. Grades and enrollment records should be maintained indefinitely. Discipline records are supposed to be destroyed according to current law but by virtue of being transmitted to the state they are permanent.)
  • I did not see a provision for students who have graduated being allowed to access or request their own records. I would think once children reach 18, graduate, or become emancipated they should have access to their own records.

I would recommend these legislators work with Representative Schroeder, although based on the strikingly similiar intro’s I suspect they are already.

I highly recommend that Senator Appel’s bill (SB 449 ) meet an untimely death as soon as possible (unless significant modifications are made.) It appears this bill borrows a lot from American Legislative Exchange Council (ALEC) bill called the Student Data Accessibility, Transparency and Accountability Act and clearly has passages submitted by the Louisiana State Department of Education (such as the section related to calculating the 4 year cohort rate).

http://www.alec.org/model-legislation/student-data-accessibility-transparency-accountability-act/

The ALEC bill does nothing to protect student privacy or parental rights. A more simple and accurate name for this bill would be the Student Data Accessibility to Corporations Act. That makes sense as ALEC’s clients are many of the corporations that want to have unfettered access to student information. Appel’s bill is actually even worse than the ALEC bill (to parents and students, not corporations) in many respects in that it enshrines all the data sharing adventures that LDOE, the Workforce Commission, inBloom and anyone else under the sun might want to embark upon.

The highlighted passages are the deal breakers in my opinion.

Proposed law requires BESE and the postsecondary management boards to develop, publish, and make publicly available policies and procedures to comply with the Federal Family Educational Rights and Privacy Act (FERPA) and any other applicable state and federal laws and policies. Further provides that such policies provide as follows:

(1) Access to student and de-identified data in the student data system shall be restricted to: (a) authorized staff of the state board, the state department, a postsecondary management board, the governing authority of a public elementary and secondary school, or a public postsecondary educational institution, and third-party private contractors working on behalf of these entities who require such access to perform their assigned duties; (b) school administrators, teachers, and school personnel who require such access to perform their assigned duties; (c) students and their parents; and (d) authorized staff of other state agencies as required by law or defined by interagency data-sharing agreements or memorandums of understanding.

You will also note from the above passage that Appel legitimizes all the data collections, sharing and exploitation that LDOE has recently done that has upset so many people in the first place! I can’t see this law appeasing anyone (including yours truly) who was upset by those actions.

This proposed law expressly permits any educational institution to designate anyone they please to have access to student data. This law also allows any non-educational agency to have access to this data (like Workforce Commission) as long as they have an agreement to share this data. That was already the case. However this passage is much weaker than FERPA in that iIt allows for all sharing if a state law requires it, for any reason. SB 449 also allows agencies to access student level data if they simply agree to share the data, for any reason. FERPA at least alludes to the need for an educational purpose be involved. This law makes no such pretext necessary. The LDOE’s sharing of student data with the Workforce Commission, a project being managed by Governor Jindal’s mother, is very troubling to me. This project will potentially allow employers to discriminate on who they hire based on any number of factors unrelated to the acquisition of the necessary technical certifications or graduation requirement or endorsements.

I initially thought Appel’s law defers to FERPA (which was weakened through US ED policy reinterpretations to be nearly useless), throughout his law. However upon rereading I see where it includes FERPA, and does not defer to it as many other laws I’ve seen do. If this law simply refers to FERPA as an additional law to comply with, and not an exception to the law, then I do not see a problem with it. FERPA is currently written to expressly permit State’s to make stricter laws governing privacy. Any law proposed must not allow for an exception for FERPA or the entire bill could be rendered useless, so be on the watch for that wording change.

The proposed “Privacy Officers” are quite simply a waste of taxpayer money. These positions are designed to deflect criticism from BESE, John White and LDOE, and other educational agencies and they report directly to the heads of these agencies which to me is a direct conflict of interest. These positions need to be independently elected and need to report to an entity outside the offices they are charged with overseeing. If Privacy Officers were independently elected or appointed (but not appointed by the Governor) and all data sharing agreements had to flow through these entities to be considered legal, well that could be a whole different story. . .

H.(1) The state board and each postsecondary management board shall

14 designate a chief privacy officer who shall be responsible for ensuring that all

15 student data policies and procedures are followed and every precaution is taken

16 to ensure the privacy and protection of student data.

For those of us critical of LDOE and their often touted (though equally often disproved) successes, or those wishing to conduct research in general, this bill is designed to shield LDOE explicitly from ever providing data to independent researchers or auditors to verify their claims on voucher, charter schools, VAM, SPS scores, etc.

Only aggregate data shall be used in public reports or in response to record requests.

(3) Requires the state board and each postsecondary management board to develop

criteria for the approval of research and data requests from state and local agencies,

the legislature, researchers, and the public. Provides that unless otherwise approved

by the state board or appropriate postsecondary management board, student data

maintained by these boards and institutions under their supervision shall remain

confidential. Further provides that unless otherwise approved by the state board or

appropriate postsecondary management board, only aggregate data may be used in

the release of data in response to research and data requests.

In truth, the other proposed bills would eliminate data sharing as well, but this bill emphatically shields LDOE from ever providing data to anyone except those who will give them glowing reviews about their programs and policies.

This next passage is quite perplexing to me:

Provides that student data does not include, unless included in a

student’s educational record, juvenile delinquency records; criminal records; medical

and health records; student Social Security number; or student biometric information.

So . . . data is not student data . . . unless it is student data? Wow. This passage seems like it was thrown in there to make it seem like the bill addresses the retention and collection of criminal records, juvenile justice records, medical records, SSN’s and biometric data, when it does absolutely nothing about those issues.

Despite the name, Appel’s SB 449 is not a student data privacy bill, it’s whatever the opposite of that is; a student data sharing bill perhaps? SB 449 is a student data sharing bill with a few more rules for folks to jump through in exchange for more opportunities to share data. This bill is clearly designed to please corporations and corporate donors, to okay everything LDOE has done to date, and to facilitate the expansion of data sharing in our state under the guise of protecting the privacy and rights of children. Passage of this bill means inBloom, and anyone and everyone like them, can open up shop immediately and with the State’s blessing.

For those of you wishing to put a stop data sharing, SB 449 is not for you. With some tweaks that bill might be able to better define the conditions under which data sharing can take place, and how such sharing and data collections are conducted and documented in the future. However the clear intent of this law is to enable data sharing and facilitate data harvesting through a more methodical process. This bill does not have an enforcement mechanism, or penalties defined for violations and violators. I see nothing in this proposed law that will restrict the uses of student data or whom can have access to said data. If anything this law expands the possible list of data recipients and data uses beyond what FERPA allows. (Of course it would take years of court battles to resolve that difference and in the meantime the data would already have been released into the wild and essentially irrecoverable.)

I also see SB 449 as removing any feeble barricades that might remain to put the brakes on data sharing. In exchange what you might get out of it is more transparency as to where this data is going and what the initial uses are for this data. It will not prevent unlimited redisclosures of data by vendors and I see no enforcement mechanism to ensure agencies are documenting their disclosures in a timely and complete manner. I also see no mechanism by which parents can opt out of disclosures, and no mechanism by which parents can report possible violations of this law or seek redress, remediation or compensation. This law also does not address whether parents or students can access their data or correct data that is inaccurate. I see nothing about destruction of certain types of sensitive data after specific time (such as discipline or medical records).

I would rather nothing pass than Appel’s bill, SB 449, as written. This bill will quite likely make things worse for the children of Louisiana. If this law passes, or nothing passes, parents need to hold the legislators who stood in the way of protecting their children responsible.

Advertisements

18 thoughts on “My Review of Proposed Privacy Legislation for Louisiana

  1. Thank you Jason for helping parents navigate through the maze of privacy legislation. I would also like to thank Representative Schroeder, Representative Cromer, Representative Ivey,and Representative Richard for their efforts to protect our children from child data tracking/sharing. To his end, I am asking these legislators to deploy whatever strategy possible to pass Representative Schroeder’s Data Privacy Bill – HB 946.

    No other children from any other state had their social security numbers(and more personal information) sent to a cloud entity(InBloom). Why are we having to put extra security alerts on our children’s bank accounts, purchase Life Lock, etc. because of Superintendent White’s irresponsible behavior? The harm is done and our children will have to look over their shoulders for the rest of their lives. They deserve the STRONGEST privacy legislation in the country.

    Even as an outspoken critic of Governor Jindal, Senator Appel, and John White – I would NEVER EVER wish this upon their children. In fact, if this attack had occurred on their children , I would have been the first to come to their aid. It is a mystery to me why Governor Jindal, Senator Appel, John White (and now apparently Senator LaFleur) would seek to track and per sui our children impeding their academic achievement and affecting their psyche by instilling fear,by that tracking, being done on them in school and used to herd them into the workforce – all part of the CCSSI.

  2. When are you going to address Jump Start and Career and Technical Education changes that will affect this year’s incoming Freshmen?

    1. Ive gathered info on these but not developed an informed opinion yet. I need to discuss with some folks on the ground. To me it looks like more of the same. We create these programs every year, they fail, we never acknowledge that, then we introduce new programs. That’s been the pattern for about a decade that I’ve been watching.

  3. Thank you so much Jason for the incredible amount of time and effort and caring that you have put into this post, and every other post on Common Core.

  4. Good stuff once again Jason!!! Thanks bunches!!…..but this is one time I am going to have to disagree on just one small part- Jason (very respectfully may i add)……the bill itself is attractive to parents BECAUSE it locks things down tightly with no exceptions. When you start adding in provisions or exceptions then you end up with a “watered down bill” that allows for the risk of a breech or a transfer stating for the listed purposes but really in truly it wasn’t. This bill is being supported because it gives NO ONE any wiggle room. The bill also states very clearly that the students record is personal property of the student or his/her parent or legal guardian which would cover points 1, 2 and 4 that Jason made. parents can retain copies of the records to fullfill any of the above needed requests or they can ask for my consent- other than that- LEAVE MY CHILDS INFO ALONE

    1. Disagreement is fine and encouraged. That’s why I write a blog and not an info pamphlet. 🙂 My fear is that we wind up with something so tight districts are not willing to release anything to anyone, even parents. That fine and jailtime is pretty imposing.  A few explicit and limited exceptions can clarify how folks can still function within this framework. I can see districts refusing to provide this data to anyone.  How will they know for sure they are releasing it to the correct parent or legal guardian without collecting a lot of info on the child and their parents? This will be consideration for obtaining parental consent as well. Just some thoughts for folks to consider…

      Sent via the Samsung Galaxy Note® 3, an AT&T 4G LTE smartphone

  5. Great information Jason! I completely agree with the above comments posted by Debbie. I hope to see MANY parents and grandparents at the capitol on Wednesday! As I understand it, each citizen will get 3 minutes to speak if so inclined. The future of our children needs to be protected against the likes of people like Appel.

  6. Jason and others: These bills all sound like mistakes if they eliminate the expectation that citizens may successfully demand raw data. I don’t want identifiable data, but I certainly don’t trust the state or its contractors to summarize suitably without some independent checks and balances. Proper independent verification of accountability data require student-level data. But it’s perfectly reasonable and appropriate to mask the identity of the students for whom the data was generated. For example, in knowing whether McKinley High School’s graduation rate and graduation index were calculated properly, I think it’s important to know how many students were in the original cohort (exact number, not nearest 10), how many had each of the distinct levels on the graduation index scale, how many transferred in (in-parish, out-of-parish, out-of-state, etc.), how many transferred out, how many died, etc. The very real need to protect students’ privacy should not be used as an excuse for the administration to be even less accountable to the public than it already is. Is there a bill I can support? James

    Dr. James Finney 8121 Oak View Drive Baton Rouge, LA 70814 225-252-0412 (cell) http://www.jamescfinney.us

    ________________________________

    1. I honestly don’t see one for researchers, James. I see two poles of thought at work here, but I see the privacy bill by Schroeder as all but eliminating the need for an LDOE to define or implement policies. Both bills will cut out researchers. One bill protects the rights of children and parents and one exploits them. I think we are on the edge of an information gold rush and student data is the Klondike. I think shutting down that pipeline is the greatest concern for parents right now. Corporations and governmental agencies have shown little interest in protecting privacy or the rights of parents and children. Perhaps a complete cut-off will get their attention?

    2. I have to agree with Finney for this reason – Student data WILL be collected and certain data is necessary for research, analysis and use to develop strategies for serving children with equity and excellence (goals shared by LDOE and the public). The missing dynamic here is the accountability factor which White and BESE have used as a weapon and clearly escaped on their part. One of the essential element that needs to be clear and without exception is that of FULL DISCLOSURE. Any student data suitable for disclosure to any researcher or other approved entity must also be suitable for disclosure to the public and must be disclosed along with any other data such as school performance scores on the LDOE website which have come to know and love as “Louisiana Believes.” (actually this should apply to any other public K-12 information or data such as teacher certification, employment opportunities etc which are now effectively hidden because they are found on separate websites.). ALL data used to calculate those school performance scores should also have required disclosure to assure that it is both collected and reported accurately and fully. This would eliminate the need for parental permission as parents would know that personally identifiable data would not be publicly available. The only exception to the data collection involving more personal information would be for meeting the requirements of special education associated federal funding laws and that s hound be disclosed to parents of special needs children via the IEP.

      1. I do not disagree with some of your goals, however those are not privacy bills, but transparency or accountability bills or concerns. As long as White and Jindal are in charge you can forget ever getting anything you want to hold them accountable. You can forget it, it won’t happen, they can’t afford for it to happen because everything they have done and are doing is a lie. They know it, which is why they fight tooth and nail in court to prevent any data being released to anyone independent, even to the Federal government under an existing ruling and consent decree.

        Since that is not going to happen, i don’t see the point in trying to pursue that goal at this time with this legislaure, governor and superintendent and BESE board.

        We also don’t have a bill that even comes close to addressing those goals, even if we thought it could pass.

        What is of primary concern to many parents and legislators and me is privacy and the prevention of child exploitation by our government and corporations. We do have a lot of backing to pursue that objective, which will also greatly hamstring the LDOE and all their data driven policies and metrics as a nice nifty bonus. If we can kill their data collections, we don’t need to disprove them, they will not be able to do VAM, or PARCC, or Workforce Commission, or inBloom or Course Choice or vouchers or anything else.

        It’s a neat idea, (containing a degree of risk to be sure) and i can’t take credit for thinking it up. but I can certainly back the idea as an interesting remedy to all the ills that LDOE is heaping upon us.

        Realistically I think Jindal will veto anything we pass, assuming it even comes to a vote, but at least we will see where he stands, which will not be with the parents and children of his state.

  7. I am so very grateful to have you on the side of real education for our children. Your information is greatly appreciated and is passed on to other educators as I am a teacher in Jefferson Parish. Happy we have you Crazy Crawfish on our side.

  8. Mississippi’s Legislation session will be ending soon.Unfortunately after much time and energy on behalf of Legislators that care about the education and protection of their children,nothing was accomplished regarding Bills.Thank you Senator Angela Hill and Senator Tony Smith and others that joined efforts in Mississippi to speak up for the children in their state. We cannot not allow this to happen here in Louisiana!! Thank you Louisiana State Representative Schroeder,Representative Cromer,Representative Ivey,Representative Smith and Representative Richard for their continual efforts of standing up for the rights and protection of our children in our state!

  9. Hello there, I believe your blog might be
    having web browser compatibility issues. When I look at your website in Safari, it looks fine however,
    if opening in IE, it’s got some overlapping issues. I just
    wanted to provide you with a quick heads up! Besides that,
    excellent site!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s