SOPPA requires that districts enter into Data Privacy agreements with every 3rd party software application or online service provider.  These providers are known as operators. The Data Privacy Agreements define what data is shared with the operators and what safeguards and security the operators have in place.  In addition these agreements maintain the legal standards laid out in SOPPA to ensure all vendors meet those requirements.

USD116 leverages the Student Data Privacy Consortium (SDPC), which is a collaborative of schools, districts, regional, territories and state agencies, policy makers, trade organizations and marketplace providers addressing real-world, adaptable, and implementable solutions to growing data privacy concerns. If you would like to read more about the SDPC, click here. Through the SDPC we enter into contracts with 3rd party vendors who handle our student’s data. If you would like to view the DPAs that USD116 current holds, please click the following link.

USD116 Data Privacy Agreements

In the event there is a data breach, Urbana School District 116 is required to notify parents via the District’s communication system (Skylert) within 30 days of the breach and within 60 days if a third-party is responsible for the data breach. 

Parents/guardians have the right to inspect, review, and correct information maintained by the school, operator, and the Illinois State Board of Education. All requests should be directed to the Data Privacy Officer by emailing soppa@usd116.org.

Additionally, the data that is shared with each individual operator is defined in Exhibit B of the respective Data Privacy Agreement found in the SDPC listing

USD116 maintains enterprise firewalls and network equipment and is continually working to implement upgrades and to ensure network security and student safety.

USD116 maintains reliable data backups to ensure data continuity in the event of a failure.

USD116 deploys endpoint protection systems (antivirus) to appropriate District devices.

USD116 utilizes dual content filtering systems for all District devices for internet safety of our students and staff.

USD116 is continuing to implement the LTC Reasonable Security Practices .

The USD116 Technology Committee meets regularly to determine ongoing technology and security needs for the District.

USD116 leverages the Student Data Privacy Consortium (SDPC) Digital Resource Request Form to maintain and manage a list of current operator agreements.  This list is available to staff and is communicated on an annual basis.  Staff can also request new software and applications through the management tool that is available through the IT department.

SDPC Digital Resource Agreement Listing

4:12 Acceptable Use of District Computer Network by Employees 
6:235 Access to Electronic Networks
7:345 Use of Educational Technologies; Student Data Privacy and Security