Data Privacy and Cybersecurity - Huffman Independent School District

Data Privacy & Cybersecurity

Data Privacy

District Commitment

Huffman Independent School District recognizes the importance of student data and is dedicated to safeguarding it. We promise to manage and use student data responsibly, in compliance with all relevant laws and regulations. HISD adheres to all State and Federal laws that protect the privacy of student education records and personally identifiable information (PII) from unauthorized disclosure, whether intentional or accidental, and requires written consent for any disclosure.

District Student Data Collection
Huffman Independent School District (HISD) ensures that data collection aligns with the specific policies, practices, and service requirements mandated by state, federal, and local laws and regulations. Most student data remains within the local entity. Various levels of government—district, state, and federal—collect student data for essential purposes such as guiding instruction and providing public information. However, the type of data collected and who has access to it varies at each level.
What is Student Data
The Use of Student Data
Understanding Student Monitoring

Texas Records Exchange (TREx)
The Texas Records Exchange (TREx) system is a web-based software application designed for the exchange of electronic student records as mandated by the 79th Legislature, 3rd Called Session, 2006 (House Bill 1). Using the TREx application, school registrars can electronically request and receive student records for students who have attended or will be attending Texas public schools. High school registrars and counselors can electronically create and send official student transcripts to Texas public colleges and universities using TREx to access the SPEEDE server.
Texas Records Exchange (TREx), Texas Student Data System (TSDS)

Texas Data Privacy Agreement
Huffman Independent School District, in partnership with other Texas school districts through the Texas Student Privacy Alliance (TXSPA), shares common concerns about student privacy. The TXSPA aims to establish standards and expectations for student privacy, ensuring all parties have a mutual understanding. All member schools will adopt and implement a common Student Data Privacy Agreement when using any online application. This agreement ensures that vendors and schools have consistent expectations when forming relationships or implementing new applications, eliminating the need to renegotiate terms each time.
Huffman ISD Texas Data Privacy Alliance

What is a Data Breach?
Data breaches come in many different forms, from cyber criminals breaking into school data systems and stealing sensitive data about students or employees to accidental disclosures due to errors or misconfigurations. A data breach can be understood as any circumstance where a school’s student data is improperly accessed, compromised, or disclosed to a third party.
A Parent’s Guide for Understanding K-12 School Data Breaches

For more resources about federal student privacy laws and protecting student privacy:

Guidance for School Officials on Student Health Records (FERPA) 2023
Student Guide to the Family Educational Rights and Privacy Act (FERPA) 2023
Parent Guide to the Family Educational Rights and Privacy Act (FERPA
K-12 School Service Provider Pledge to Safeguard Student Privacy
Student Privacy Website (https://studentprivacy.ed.gov/)
Student Privacy Compass(https://studentprivacycompass.org/)
Student Privacy Pledge 2020(https://studentprivacypledge.org/)

Policies & Laws

Laws/Regulations
Family Educational Rights and Privacy Act (FERPA)
The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99) is a Federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education

Children's Online Privacy Protection Rule (COPPA)
COPPA imposes certain requirements on operators of websites or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age.

Children’s Internet Protection Act (CIPA)
The Children's Internet Protection Act (CIPA) was enacted by Congress in 2000 to address concerns about children's access to obscene or harmful content over the Internet.

Board Policy
CQB - Cybersecurity
*Board Policy is reviewed regularly to ensure that they align with all current laws and regulations.