Password Policy Student Data Privacy and Security
- Kara Michelle Liu
In our commitment to safeguarding the privacy and security of student data, we have implemented a comprehensive Password Policy. This policy is designed to ensure that all individuals, including students, teachers, and families, play an active role in maintaining the confidentiality and integrity of student information in RethinkEd platform, app, and Vizzle.
Privacy and Security:
Privacy Concerns: We recognize that privacy is a fundamental right, and individuals should have control over their personal data. This policy aligns with our commitment to protecting the rights of students by defining procedures and policies for the collection, storage, and use of their data.
Security Measures: To protect against cyber threats and data disasters, we employ robust technical and physical security strategies. These measures include preventing unauthorized access, ensuring data integrity, and guarding against accidental data corruption. Our security practices align with industry standards to provide a safe learning environment for students.
Rationale:
Confidential information is now being shared within the Student Center inbox. Ensuring robust password security is essential to prevent unauthorized access to sensitive data such as incident reports and behavior plans shared with students.
Password Changes:
Teacher-Initiated Changes: Teachers with Manage Classroom permissions can change student passwords through the Student Dashboard. They will see a settings icon on the new student profile details area, which they can click to view profile details and change the password. They can still log in as the student and change it there as well. This ensures that teachers can maintain control over student accounts when necessary, while also adhering to data privacy standards.
Student-Initiated Changes: Students also have the option to change their passwords by logging in and navigating to their account settings. This promotes a sense of ownership and responsibility for their account security.
New Manual Customers: Professional Services will still give customers the same bulk password in school spreadsheet. However, once development is complete when they log in for the first time, the student/teacher will need to either create a new password at log in or they will add a unique password for every student in the Student Center or from the Student dashboard.
Student Vizzle and RethinkEd Merge: We will be matching and merging student accounts so that we can integrate the usage of Vizzle activities in the Rethinked platform. Students/teachers will have to create a new password when they login once this merge happens in the new year. More to come on this….
Password Storage:
Once development has completed this update, we will not store usernames and passwords in the credentials area. Instead, we will share usernames with teachers/students, and they are responsible for making note of the new password and safeguarding their passwords. This practice reduces the risk of unauthorized access to student accounts and ensures that we are in compliance with FERPA and COPPA.
Password Requirements:
Password Length: Passwords must be a minimum of 6 characters long. This requirement ensures a basic level of complexity to enhance security.
Privacy Awareness: Teachers and students are encouraged to keep their passwords private. Sharing passwords compromises security and violates privacy.
Use of Phrases: We encourage the use of phrases from books that students are reading as a strategy to create memorable yet secure passwords. This approach promotes both security and educational engagement.
In conclusion, this Password Policy reflects our unwavering commitment to protecting student data privacy and ensuring the highest levels of security in our online systems. We believe that through collective responsibility and adherence to these practices, we can provide a safe and secure learning environment for all students and stakeholders.