TLE Sample Criteria:
2-Business - 2. The school system regularly educates its employees about the importance of, and expectations for, the use of the established vetting process for online services.
2-Business - 3 The school system implements contract language and data sharing agreements addressing student data privacy and data security.
2-Business - 4. The school system ensures that all business processes associated with student data include enforceable data privacy and security requirements.
3-Data Security - 1. The school system website includes its data privacy and security policies and practices which are updated as-needed, but at least on an annual basis.
3-Data Security - 2. The school system data privacy and security procedures includes information about data retention periods for student records, data transmission technical protocols, data at-rest and methods and controls limiting access to electronic data.
3-Data Security - 3. The school system has enforceable policies regarding storage of data on local computers, mobile devices, storage devices and cloud file-sharing and storage services.
3-Data Security - 4. The school system utilizes a documented, role-based process when granting access rights to educators, staff, and contractors to data and technology systems.
3-Data Security - 5. The school system has a process in place to communicate data incidents to appropriate stakeholders, in accordance with state law and school system policies.
3-Data Security - 6. The school system has a business continuity and disaster recovery plan which is verified and tested on an established, regular basis.
3-Data Security - 7. The school system performs an audit of data privacy and security practices on an established, regular basis.
4-Professional Development - 1. Privacy and security of student data is embedded into training and professional development in all areas of school operations and academics.
4-Professional Development - 2. The school system provides employees with up-to-date, easily accessible resources and documented processes, including exemplars and templates that facilitate student data privacy and security.
4-Professional Development - 3. Parents are offered appropriate awareness training and resources about student data privacy and security.
4-Professional Development - 4. All staff members participate in annual student data privacy training related to applicable federal and/or state laws.
5-Classroom - 1. Teachers implement a curriculum to promote student information literacy, digital citizenship and Internet safety.
5-Classroom - 2. Teachers are aware of and regularly use the school system’s established process for vetting and procuring online services.
5-Classroom - 3. Teachers model appropriate use and protection of student data for their students.
5-Classroom - 4. Teacher communications to parents include clear information about the collection, use and protection of student data.