Data Protection and Security Website Compliance


Data Privacy and Security Policy:


Data Privacy and Security Policy  (click on link to download)


“In order to conduct a successful education program, the district receives, creates, stores and transfers information about students, teachers and principals that is protected by state and federal law. The district takes active steps to protect the confidentiality of protected information in compliance with all applicable state and federal laws. The district expects all District officers, employees, and partners to maintain the confidentiality of protected information in accordance with state and federal law and all applicable Board Policies.”


Parent Bill of Rights 


Parent Bill of Rights  (click on link to download)


Student Privacy FERPA Notice

West Canada Valley Central School District is required to annually notify parents of their rights under FERPA; that information can be found in our FERPA Notification Policy. Under FERPA, the District may identify certain data elements as Directory Information, which may be disclosed without obtaining prior parental consent. Parents are provided with the opportunity to opt out of certain Directory Information disclosures by filling out the form HERE. The data identified as Directory Information by our BOCES is:

  • student’s name
  • address
  • telephone number
  • email address
  • date and place of birth
  • name of the student’s parents
  • student’s home school district
  • student’s class designation
  • participation in extracurricular activities
  • dates of attendance
  • student’s achievement awards and honors
  • most recent previous educational agency attended by the student.
  • photographs
  • audio recordings
  • video images of students (with or without sound) engaged in routine activities.


Additional FERPA Form Links: Inspection of Student Records, Correction of Student Records


District Software Inventory:


Below you will find a hyperlink to West Canada Valleys software inventory. 


District Software Inventory (click on link to download)


Breach or Unauthorized Release of Student Data Complaints


The West Canada Valley Central School District is dedicated to the protection of student data and to maintaining data security and privacy across the district. If you believe that a breach or unauthorized disclosure of student personally identifiable information has occurred, please complete this form and submit it in person to one of our Data Protection Officers. Any parent, eligible student (students who are at least 18 years of age or attending a postsecondary institution at any age), principal, teacher or employee of an educational agency may file a complaint. A complaint can also be submitted to the New York State Chief Privacy Officer using this online form.


Federal Laws that Protect Student Data


Education Law 2-D (click on link to download)

Provides guidance to educational agencies and their third-party contractors on ways to strengthen data privacy and security to protect student data and annual professional performance review data.

Part 121 of the Regulations of the Commissioner of Education (click on link to download)

The Board of Regents adopted Part 121 of the Regulations of the Commissioner of Education on January 13, 2020. These rules implement Education Law Section 2-D.

Family Educational Rights and Privacy Act (FERPA) (click on link to download)

The foundational federal law on the privacy of students’ educational records, FERPA, safeguards student privacy by limiting who may access student records, specifying for what purpose they may access those records, and detailing what rules they have to follow when accessing the data.

Protection of Pupil Rights Amendment (PPRA) (click on link to download)

PPRA defines the rules states and school districts must follow when administering tools like surveys, analysis and evaluations funded by the U.S. Department of Education to students. It requires parental approval to administer many such tools and ensures that school districts have policies in place regarding how the data collected through these tools can be used.

Children's Online Privacy Protection Rule (COPPA) (click on link to download)

COPPA imposes certain requirements on operators of websites, games, mobile apps or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.


Data Protection Officer


Ronald Wheelock (Interim Superintendent)

District Superintendent